# Vulnerabilities published in 2021


- [CVE-2021-29629](https://insights.sbomify.com/CVE-2021-29629/): Denial of service in FreeBSD (high 7.5)
- [CVE-2021-29628](https://insights.sbomify.com/CVE-2021-29628/): Security feature bypass in FreeBSD (high 7.5)
- [CVE-2021-29627](https://insights.sbomify.com/CVE-2021-29627/): Use after free in FreeBSD (high 7.8)
- [CVE-2021-29626](https://insights.sbomify.com/CVE-2021-29626/): Use after free in FreeBSD (medium 5.5)
- [CVE-2021-29625](https://insights.sbomify.com/CVE-2021-29625/): XSS in doc_link (high 7.5)
- [CVE-2021-29624](https://insights.sbomify.com/CVE-2021-29624/): Lack of protection against cookie tossing attacks in fastify-csrf (medium 6.5)
- [CVE-2021-29623](https://insights.sbomify.com/CVE-2021-29623/): Uninitialized variable bug in Exiv2 (low 3.6)
- [CVE-2021-29622](https://insights.sbomify.com/CVE-2021-29622/): Arbitrary redirects under /new endpoint (medium 6.5)
- [CVE-2021-29621](https://insights.sbomify.com/CVE-2021-29621/): Observable Response Discrepancy in Flask-AppBuilder (medium 5.3)
- [CVE-2021-29620](https://insights.sbomify.com/CVE-2021-29620/): XXE vulnerability on Launch import with externally-defined DTD file (high 7.5)
- [CVE-2021-29619](https://insights.sbomify.com/CVE-2021-29619/): Segfault in `tf.raw_ops.SparseCountSparseOutput` (low 2.5)
- [CVE-2021-29618](https://insights.sbomify.com/CVE-2021-29618/): Crash in `tf.transpose` with complex inputs (low 2.5)
- [CVE-2021-29617](https://insights.sbomify.com/CVE-2021-29617/): Crash in `tf.strings.substr` due to `CHECK`-fail (low 2.5)
- [CVE-2021-29616](https://insights.sbomify.com/CVE-2021-29616/): Null dereference in Grappler's `TrySimplify` (low 2.5)
- [CVE-2021-29615](https://insights.sbomify.com/CVE-2021-29615/): Stack overflow in `ParseAttrValue` with nested tensors (low 2.5)
- [CVE-2021-29614](https://insights.sbomify.com/CVE-2021-29614/): Interpreter crash from `tf.io.decode_raw` (high 7.1)
- [CVE-2021-29613](https://insights.sbomify.com/CVE-2021-29613/): Incomplete validation in `tf.raw_ops.CTCLoss` (medium 6.3)
- [CVE-2021-29612](https://insights.sbomify.com/CVE-2021-29612/): Heap buffer overflow in `BandedTriangularSolve` (low 3.6)
- [CVE-2021-29611](https://insights.sbomify.com/CVE-2021-29611/): Incomplete validation in `SparseReshape` (low 3.6)
- [CVE-2021-29610](https://insights.sbomify.com/CVE-2021-29610/): Invalid validation in `QuantizeAndDequantizeV2` (low 3.6)
- [CVE-2021-29609](https://insights.sbomify.com/CVE-2021-29609/): Incomplete validation in `SparseAdd` (medium 5.3)
- [CVE-2021-29608](https://insights.sbomify.com/CVE-2021-29608/): Heap OOB and null pointer dereference in `RaggedTensorToTensor` (medium 5.3)
- [CVE-2021-29607](https://insights.sbomify.com/CVE-2021-29607/): Incomplete validation in `SparseSparseMinimum` (medium 5.3)
- [CVE-2021-29606](https://insights.sbomify.com/CVE-2021-29606/): Heap OOB read in TFLite (high 7.1)
- [CVE-2021-29605](https://insights.sbomify.com/CVE-2021-29605/): Integer overflow in TFLite memory allocation (high 7.1)
- [CVE-2021-29604](https://insights.sbomify.com/CVE-2021-29604/): Division by zero in TFLite's implementation of hashtable lookup (low 2.5)
- [CVE-2021-29603](https://insights.sbomify.com/CVE-2021-29603/): Heap OOB write in TFLite (low 2.5)
- [CVE-2021-29602](https://insights.sbomify.com/CVE-2021-29602/): Division by zero in TFLite's implementation of `DepthwiseConv` (low 2.5)
- [CVE-2021-29601](https://insights.sbomify.com/CVE-2021-29601/): Integer overflow in TFLite concatentation (medium 6.3)
- [CVE-2021-29600](https://insights.sbomify.com/CVE-2021-29600/): Division by zero in TFLite's implementation of `OneHot` (low 2.5)
- [CVE-2021-29599](https://insights.sbomify.com/CVE-2021-29599/): Division by zero in TFLite's implementation of `Split` (low 2.5)
- [CVE-2021-29598](https://insights.sbomify.com/CVE-2021-29598/): Division by zero in TFLite's implementation of `SVDF` (low 2.5)
- [CVE-2021-29597](https://insights.sbomify.com/CVE-2021-29597/): Division by zero in TFLite's implementation of `SpaceToBatchNd` (low 2.5)
- [CVE-2021-29596](https://insights.sbomify.com/CVE-2021-29596/): Division by zero in TFLite's implementation of `EmbeddingLookup` (low 2.5)
- [CVE-2021-29595](https://insights.sbomify.com/CVE-2021-29595/): Division by zero in TFLite's implementation of `DepthToSpace` (low 2.5)
- [CVE-2021-29594](https://insights.sbomify.com/CVE-2021-29594/): Division by zero in TFLite's convolution code (low 2.5)
- [CVE-2021-29593](https://insights.sbomify.com/CVE-2021-29593/): Division by zero in TFLite's implementation of `BatchToSpaceNd` (low 2.5)
- [CVE-2021-29592](https://insights.sbomify.com/CVE-2021-29592/): Null pointer dereference in TFLite's `Reshape` operator (medium 4.4)
- [CVE-2021-29591](https://insights.sbomify.com/CVE-2021-29591/): Stack overflow due to looping TFLite subgraph (high 7.3)
- [CVE-2021-29590](https://insights.sbomify.com/CVE-2021-29590/): Heap OOB read in TFLite's implementation of `Minimum` or `Maximum` (low 2.5)
- [CVE-2021-29589](https://insights.sbomify.com/CVE-2021-29589/): Division by zero in TFLite's implementation of `GatherNd` (low 2.5)
- [CVE-2021-29588](https://insights.sbomify.com/CVE-2021-29588/): Division by zero in TFLite's implementation of `TransposeConv` (low 2.5)
- [CVE-2021-29587](https://insights.sbomify.com/CVE-2021-29587/): Division by zero in TFLite's implementation of `SpaceToDepth` (low 2.5)
- [CVE-2021-29586](https://insights.sbomify.com/CVE-2021-29586/): Division by zero in optimized pooling implementations in TFLite (low 2.5)
- [CVE-2021-29585](https://insights.sbomify.com/CVE-2021-29585/): Division by zero in padding computation in TFLite (low 2.5)
- [CVE-2021-29584](https://insights.sbomify.com/CVE-2021-29584/): CHECK-fail due to integer overflow (low 2.5)
- [CVE-2021-29583](https://insights.sbomify.com/CVE-2021-29583/): Heap buffer overflow and undefined behavior in `FusedBatchNorm` (low 2.5)
- [CVE-2021-29582](https://insights.sbomify.com/CVE-2021-29582/): Heap OOB read in `tf.raw_ops.Dequantize` (low 2.5)
- [CVE-2021-29581](https://insights.sbomify.com/CVE-2021-29581/): Segfault in `CTCBeamSearchDecoder` (low 2.5)
- [CVE-2021-29580](https://insights.sbomify.com/CVE-2021-29580/): Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad` (low 2.5)
- [CVE-2021-29579](https://insights.sbomify.com/CVE-2021-29579/): Heap buffer overflow in `MaxPoolGrad` (low 2.5)
- [CVE-2021-29578](https://insights.sbomify.com/CVE-2021-29578/): Heap buffer overflow in `FractionalAvgPoolGrad` (low 2.5)
- [CVE-2021-29577](https://insights.sbomify.com/CVE-2021-29577/): Heap buffer overflow in `AvgPool3DGrad` (low 2.5)
- [CVE-2021-29576](https://insights.sbomify.com/CVE-2021-29576/): Heap buffer overflow in `MaxPool3DGradGrad` (low 2.5)
- [CVE-2021-29575](https://insights.sbomify.com/CVE-2021-29575/): Overflow/denial of service in `tf.raw_ops.ReverseSequence` (low 2.5)
- [CVE-2021-29574](https://insights.sbomify.com/CVE-2021-29574/): Undefined behavior in `MaxPool3DGradGrad` (low 2.5)
- [CVE-2021-29573](https://insights.sbomify.com/CVE-2021-29573/): Division by 0 in `MaxPoolGradWithArgmax` (low 2.5)
- [CVE-2021-29572](https://insights.sbomify.com/CVE-2021-29572/): Reference binding to nullptr in `SdcaOptimizer` (low 2.5)
- [CVE-2021-29571](https://insights.sbomify.com/CVE-2021-29571/): Memory corruption in `DrawBoundingBoxesV2` (medium 4.5)
- [CVE-2021-29570](https://insights.sbomify.com/CVE-2021-29570/): Heap out of bounds read in `MaxPoolGradWithArgmax` (low 2.5)
- [CVE-2021-29569](https://insights.sbomify.com/CVE-2021-29569/): Heap out of bounds read in `RequantizationRange` (low 2.5)
- [CVE-2021-29568](https://insights.sbomify.com/CVE-2021-29568/): Reference binding to null in `ParameterizedTruncatedNormal` (low 2.5)
- [CVE-2021-29567](https://insights.sbomify.com/CVE-2021-29567/): Lack of validation in `SparseDenseCwiseMul` (low 2.5)
- [CVE-2021-29566](https://insights.sbomify.com/CVE-2021-29566/): Heap OOB access in `Dilation2DBackpropInput` (low 2.5)
- [CVE-2021-29565](https://insights.sbomify.com/CVE-2021-29565/): Null pointer dereference in `SparseFillEmptyRows` (low 2.5)
- [CVE-2021-29564](https://insights.sbomify.com/CVE-2021-29564/): Null pointer dereference in `EditDistance` (low 2.5)
- [CVE-2021-29563](https://insights.sbomify.com/CVE-2021-29563/): CHECK-fail in `tf.raw_ops.RFFT` (low 2.5)
- [CVE-2021-29562](https://insights.sbomify.com/CVE-2021-29562/): CHECK-fail in `tf.raw_ops.IRFFT` (low 2.5)
- [CVE-2021-29561](https://insights.sbomify.com/CVE-2021-29561/): CHECK-fail in `LoadAndRemapMatrix` (low 2.5)
- [CVE-2021-29560](https://insights.sbomify.com/CVE-2021-29560/): Heap buffer overflow in `RaggedTensorToTensor` (low 2.5)
- [CVE-2021-29559](https://insights.sbomify.com/CVE-2021-29559/): Heap OOB access in unicode ops (low 2.5)
- [CVE-2021-29558](https://insights.sbomify.com/CVE-2021-29558/): Heap buffer overflow in `SparseSplit` (low 2.5)
- [CVE-2021-29557](https://insights.sbomify.com/CVE-2021-29557/): Division by 0 in `SparseMatMul` (low 2.5)
- [CVE-2021-29556](https://insights.sbomify.com/CVE-2021-29556/): Division by 0 in `Reverse` (low 2.5)
- [CVE-2021-29555](https://insights.sbomify.com/CVE-2021-29555/): Division by 0 in `FusedBatchNorm` (low 2.5)
- [CVE-2021-29554](https://insights.sbomify.com/CVE-2021-29554/): Division by 0 in `DenseCountSparseOutput` (low 2.5)
- [CVE-2021-29553](https://insights.sbomify.com/CVE-2021-29553/): Heap OOB in `QuantizeAndDequantizeV3` (low 2.5)
- [CVE-2021-29552](https://insights.sbomify.com/CVE-2021-29552/): CHECK-failure in `UnsortedSegmentJoin` (low 2.5)
- [CVE-2021-29551](https://insights.sbomify.com/CVE-2021-29551/): OOB read in `MatrixTriangularSolve` (low 2.5)
- [CVE-2021-29550](https://insights.sbomify.com/CVE-2021-29550/): Division by 0 in `FractionalAvgPool` (low 2.5)
- [CVE-2021-29549](https://insights.sbomify.com/CVE-2021-29549/): Division by 0 in `QuantizedAdd` (low 2.5)
- [CVE-2021-29548](https://insights.sbomify.com/CVE-2021-29548/): Division by 0 in `QuantizedBatchNormWithGlobalNormalization` (low 2.5)
- [CVE-2021-29547](https://insights.sbomify.com/CVE-2021-29547/): Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization` (low 2.5)
- [CVE-2021-29546](https://insights.sbomify.com/CVE-2021-29546/): Division by 0 in `QuantizedBiasAdd` (low 2.5)
- [CVE-2021-29545](https://insights.sbomify.com/CVE-2021-29545/): Heap buffer overflow in `SparseTensorToCSRSparseMatrix` (low 2.5)
- [CVE-2021-29544](https://insights.sbomify.com/CVE-2021-29544/): CHECK-fail in `QuantizeAndDequantizeV4Grad` (low 2.5)
- [CVE-2021-29543](https://insights.sbomify.com/CVE-2021-29543/): CHECK-fail in `CTCGreedyDecoder` (low 2.5)
- [CVE-2021-29542](https://insights.sbomify.com/CVE-2021-29542/): Heap buffer overflow in `StringNGrams` (low 2.5)
- [CVE-2021-29541](https://insights.sbomify.com/CVE-2021-29541/): Null pointer dereference in `StringNGrams` (low 2.5)
- [CVE-2021-29540](https://insights.sbomify.com/CVE-2021-29540/): Heap buffer overflow in `Conv2DBackpropFilter` (low 2.5)
- [CVE-2021-29539](https://insights.sbomify.com/CVE-2021-29539/): Segfault in tf.raw_ops.ImmutableConst (low 2.5)
- [CVE-2021-29538](https://insights.sbomify.com/CVE-2021-29538/): Division by zero in `Conv2DBackpropFilter` (low 2.5)
- [CVE-2021-29537](https://insights.sbomify.com/CVE-2021-29537/): Heap buffer overflow in `QuantizedResizeBilinear` (low 2.5)
- [CVE-2021-29536](https://insights.sbomify.com/CVE-2021-29536/): Heap buffer overflow in `QuantizedReshape` (low 2.5)
- [CVE-2021-29535](https://insights.sbomify.com/CVE-2021-29535/): Heap buffer overflow in `QuantizedMul` (low 2.5)
- [CVE-2021-29534](https://insights.sbomify.com/CVE-2021-29534/): CHECK-fail in SparseConcat (low 2.5)
- [CVE-2021-29533](https://insights.sbomify.com/CVE-2021-29533/): CHECK-fail in DrawBoundingBoxes (low 2.5)
- [CVE-2021-29532](https://insights.sbomify.com/CVE-2021-29532/): Heap out of bounds read in `RaggedCross` (low 2.5)
- [CVE-2021-29531](https://insights.sbomify.com/CVE-2021-29531/): CHECK-fail in tf.raw_ops.EncodePng (low 2.5)
- [CVE-2021-29530](https://insights.sbomify.com/CVE-2021-29530/): Invalid validation in `SparseMatrixSparseCholesky` (low 2.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/177/