PyPI/tensorflow-gpu CVE-2021-41227: medium 6.6, EPSS 0.24%

Arbitrary memory read in `ImmutableConst`

Action: Upgrade tensorflow-gpu to 2.4.4 or later.

pip install tensorflow-gpu==2.6.1

pip install tensorflow-gpu==2.5.2

pip install tensorflow-gpu==2.4.4

Affected

Fixed versions

Sources

• osv: GHSA-j8c8-67vp-6mx7#PyPI/tensorflow-gpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7
• https://nvd.nist.gov/vuln/detail/CVE-2021-41227
• https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b
• https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml
• https://github.com/tensorflow/tensorflow

CVE-2021-41227 · published 2021-11-10T18:34:49Z · modified 2026-07-08T06:29:24.885786755Z · JSON