Learn about CVE-2021-37689 detailing a null pointer dereference vulnerability in TensorFlow Lite MLIR optimizations, potentially leading to denial of service. Find out more about the impact, affected systems, and mitigation.
TensorFlow is an end-to-end open source platform for machine learning. In affected versions, an attacker can craft a TFLite model that triggers a null pointer dereference, leading to a crash and denial of service. The vulnerability stems from the MLIR optimization of
L2NormalizeReduceAxis
operator.