CVE-2023-25658

CWE-125 — Out-of-bounds Read6 documents6 sources
Severity
7.5HIGH
EPSS
0.1%
top 83.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tensorflow TensorflowGoogle Tensorflow
Timeline
Latest updateMar 24
PublishedMar 25

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶PyPItensorflow< 2.11.1
▶PyPItensorflow-cpu< 2.11.1
▶PyPItensorflow-gpu< 2.11.1
▶NVDgoogle/tensorflow< 2.12.0
▶CVEListV5tensorflow/tensorflow< 2.11.1

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad↗2023-03-24
▶
OSV
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad↗2023-03-24
▶
CVEList
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad↗2023-03-24
▶

📋Vendor Advisories

2
Microsoft
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad↗2023-03-14
▶
Debian
CVE-2023-25658: tensorflow - TensorFlow is an open source platform for machine learning. Prior to versions 2....↗2023
▶
CVE-2023-25658 (HIGH CVSS 7.5) | TensorFlow is an open source platfo | cvebase.io