Segmentation fault in tensorflow-lite

Summary

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b and will release patch releases for all versions between 1.15 and 2.3. We recommend users to upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

Timeline

1. Sep 25, 2020, 6:45 PM UTCCVE published
2. Aug 4, 2024, 1:08 PM UTCRecord last updated

Affected versions

• tensorflow tensorflow

  fixed in 1.15.4; From 2.0.0 · fixed in 2.0.3; From 2.1.0 · fixed in 2.1.2; From 2.2.0 · fixed in 2.2.1; From 2.3.0 · fixed in 2.3.1

• tensorflowPyPI

  fixed in 1.15.4

• tensorflowPyPI

  From 2.0.0 · fixed in 2.0.3

• tensorflowPyPI

  From 2.1.0 · fixed in 2.1.2

• tensorflowPyPI

  From 2.2.0 · fixed in 2.2.1

• tensorflowPyPI

  From 2.3.0 · fixed in 2.3.1

• tensorflow-cpuPyPI

  fixed in 1.15.4

• tensorflow-cpuPyPI

  From 2.0.0 · fixed in 2.0.3

• tensorflow-cpuPyPI

  From 2.1.0 · fixed in 2.1.2

• tensorflow-cpuPyPI

  From 2.2.0 · fixed in 2.2.1

• tensorflow-gpuPyPI

  fixed in 1.15.4

• tensorflow-gpuPyPI

  From 2.0.0 · fixed in 2.0.3

• tensorflow-gpuPyPI

  From 2.1.0 · fixed in 2.1.2

• tensorflow-gpuPyPI

  From 2.2.0 · fixed in 2.2.1

• tensorflow-cpuPyPI

  From 2.3.0 · fixed in 2.3.1

• tensorflow-gpuPyPI

  From 2.3.0 · fixed in 2.3.1

• tensorflow-cpuPyPI

  fixed in 1.15.4; From 2.0.0 · fixed in 2.0.3; From 2.1.0 · fixed in 2.1.2; From 2.2.0 · fixed in 2.2.1; From 2.3.0 · fixed in 2.3.1

• tensorflow-gpuPyPI

  fixed in 1.15.4; From 2.0.0 · fixed in 2.0.3; From 2.1.0 · fixed in 2.1.2; From 2.2.0 · fixed in 2.2.1; From 2.3.0 · fixed in 2.3.1

• tensorflowPyPI

  fixed in 1.15.4; From 2.0.0 · fixed in 2.0.3; From 2.1.0 · fixed in 2.1.2; From 2.2.0 · fixed in 2.2.1; From 2.3.0 · fixed in 2.3.1

References 4