CVE-2021-37652

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can result in a use after free error if an attacker supplies specially crafted arguments. The [implementation](https://github.com/tensorflow/tensorflow/blob/f24faa153ad31a4b51578f8181d3aaab77a1ddeb/tensorflow/core/kernels/boosted_trees/resource_ops.cc#L55) uses a reference counted resource and decrements the refcount if the initialization fails, as it should. However, when the code was written, the resource was represented as a naked pointer but later refactoring has changed it to be a smart pointer. Thus, when the pointer leaves the scope, a subsequent `free`-ing of the resource occurs, but this fails to take into account that the refcount has already reached 0, thus the resource has been already freed. During this double-free process, members of the resource object are accessed for cleanup but they are invalid as the entire resource has been freed. We have patched the issue in GitHub commit 5ecec9c6fbdbc6be03295685190a45e7eee726ab. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

• CWE-416
• CWE-415

• https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726abPatch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6Third Party Advisory
• https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726abPatch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6Third Party Advisory

Published

Aug 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37647TensorFlow is an end-to-end open source platform for machine…5.5
• CVE-2021-37648TensorFlow is an end-to-end open source platform for machine…7.8
• CVE-2021-37649TensorFlow is an end-to-end open source platform for machine…5.5
• CVE-2021-3765validator.js is vulnerable to Inefficient Regular Expression…7.5
• CVE-2021-37650TensorFlow is an end-to-end open source platform for machine…7.8
• CVE-2021-37651TensorFlow is an end-to-end open source platform for machine…7.8
• CVE-2021-37653TensorFlow is an end-to-end open source platform for machine…5.5
• CVE-2021-37654TensorFlow is an end-to-end open source platform for machine…7.1
• CVE-2021-37655TensorFlow is an end-to-end open source platform for machine…7.3
• CVE-2021-37656TensorFlow is an end-to-end open source platform for machine…7.8
• CVE-2021-37657TensorFlow is an end-to-end open source platform for machine…7.8
• CVE-2021-37658TensorFlow is an end-to-end open source platform for machine…7.8