CVE-2021-29554 : Exploit Details and Defense Strategies

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in

tf.raw_ops.DenseCountSparseOutput

. This vulnerability allows the attacker to trigger a division by 0 due to unverified divisor values. The issue affects TensorFlow versions prior to 2.3.3 and between 2.4.0 and 2.4.2. Immediate patching is advised to prevent exploitation.