Related Vulnerabilities: CVE-2021-41222  

In TensorFlow before version 2.6.1, the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever size_splits contains more than one value and at least one value is negative.

Severity Medium

Remote No

Type Denial of service

Description

In TensorFlow before version 2.6.1, the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever size_splits contains more than one value and at least one value is negative.

AVG-2529 tensorflow 2.6.0-6 2.6.1-1 High Fixed

https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6
https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6