PyPI/tensorflow-cpu CVE-2021-29544: low 2.5, EPSS 0.31%

CHECK-fail in `QuantizeAndDequantizeV4Grad`

Action: Upgrade tensorflow-cpu to 2.4.2 or later.

pip install tensorflow-cpu==2.4.2

Affected

Fixed versions

Sources

• osv: GHSA-6g85-3hm8-83f9#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6g85-3hm8-83f9
• https://nvd.nist.gov/vuln/detail/CVE-2021-29544
• https://github.com/tensorflow/tensorflow/commit/20431e9044cf2ad3c0323c34888b192f3289af6b
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-472.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-670.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-181.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/95078c145b5a7a43ee046144005f733092756ab5/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L162-L163
• https://github.com/tensorflow/tensorflow/blob/95078c145b5a7a43ee046144005f733092756ab5/tensorflow/core/kernels/quantize_and_dequantize_op.h#L295-L306

CVE-2021-29544 · published 2021-05-21T14:23:22Z · modified 2026-07-08T06:28:48.815860815Z · JSON