CVE-2020-15190: medium-severity vulnerability in tensorflow
Segfault in Tensorflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in TensorFlow's Switch operation causes the program to crash when processing certain tensor outputs. The eager runtime tries to access an undefined tensor (nullptr) instead of checking if it exists first, leading to a segmentation fault.
The tf.raw_ops.Switch operation outputs two tensors conditionally based on a boolean input, but the eager runtime traverses both outputs without validation. When one tensor is undefined (nullptr), binding a reference to it triggers undefined behavior and segmentation fault. The vulnerability requires direct use of the vulnerable operation and affects TensorFlow versions before 1.15.4, 2.0.3, 2.1.2, 2.2.1, and 2.3.1.
In the same product, most dangerous first.