PyPI/tensorflow-gpu CVE-2021-41219: high 7.8, EPSS 0.21%

Undefined behavior via `nullptr` reference binding in sparse matrix multiplication

Action: Upgrade tensorflow-gpu to 2.4.4 or later.

pip install tensorflow-gpu==2.6.1

pip install tensorflow-gpu==2.5.2

pip install tensorflow-gpu==2.4.4

Affected

Fixed versions

Sources

• osv: GHSA-4f99-p9c2-3j8x#PyPI/tensorflow-gpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x
• https://nvd.nist.gov/vuln/detail/CVE-2021-41219
• https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml
• https://github.com/tensorflow/tensorflow

CVE-2021-41219 · published 2021-11-10T18:51:51Z · modified 2026-07-08T06:28:51.845924316Z · JSON