PyPI/tensorflow CVE-2021-37649: high 7.7, EPSS 0.16%

Null pointer dereference in `UncompressElement`

Action: Upgrade tensorflow to 2.3.4 or later.

pip install tensorflow==2.3.4

pip install tensorflow==2.4.3

pip install tensorflow==2.5.1

Affected

Fixed versions

Sources

• osv: GHSA-6gv8-p3vj-pxvr
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gv8-p3vj-pxvr
• https://nvd.nist.gov/vuln/detail/CVE-2021-37649
• https://github.com/tensorflow/tensorflow/commit/7bdf50bb4f5c54a4997c379092888546c97c3ebd
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-562.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-760.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-271.yaml
• https://github.com/tensorflow/tensorflow

CVE-2021-37649 · published 2021-08-25T14:43:27Z · modified 2026-07-08T06:28:58.170995352Z · JSON