PyPI/tensorflow CVE-2021-29572: low 2.5, EPSS 0.19%

Reference binding to nullptr in `SdcaOptimizer`

Action: Upgrade tensorflow to 2.1.4 or later.

pip install tensorflow==2.1.4

pip install tensorflow==2.2.3

pip install tensorflow==2.3.3

pip install tensorflow==2.4.2

Affected

Fixed versions

Sources

• osv: GHSA-5gqf-456p-4836
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5gqf-456p-4836
• https://nvd.nist.gov/vuln/detail/CVE-2021-29572
• https://github.com/tensorflow/tensorflow/commit/f7cc8755ac6683131fdfa7a8a121f9d7a9dec6fb
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-500.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-698.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-209.yaml
• https://github.com/tensorflow/tensorflow

CVE-2021-29572 · published 2021-05-21T14:25:31Z · modified 2026-07-08T06:29:24.082398068Z · JSON