CVE-2023-25659
published 2023-03-25CVE-2023-25659: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match…
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tensorflow | — | — |
| tensorflow | < 2.12.0 | 2.12.0 | |
| intel | optimization_for_tensorflow | >= 0 < 2.11.1 | 2.11.1 |
| msrc | azl3_python-cryptography_3.3.2-5_on_azure_linux_3.0 | — | — |
| msrc | azl3_python-cryptography_42.0.5-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_tensorflow_2.11.1-1_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_python-cryptography_3.3.2-7_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_tensorflow_2.11.1-1_on_cbl_mariner_2.0 | — | — |
| tensorflow | tensorflow | < 2.11.1 | 2.11.1 |