Learn about CVE-2021-37640, a vulnerability in TensorFlow versions prior to 2.5.1 that can trigger a division by 0 exception. Find out the impact, technical details, and mitigation steps.
TensorFlow is an open-source platform for machine learning. A vulnerability exists in versions prior to 2.5.1 that can trigger an integral division by 0 exception due to the improper implementation of
tf.raw_ops.SparseReshape
. The issue has been patched in the GitHub commit 4923de56ec94fff7770df259ab7f2288a74feb41 and will be resolved in TensorFlow 2.6.0 and backported to 2.5.1.