CVE-2023-25668
published 2023-03-25CVE-2023-25668: TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the…
PriorityP357critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.83%
53.5th percentile
TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tensorflow | — | — |
| tensorflow | < 2.12.0 | 2.12.0 | |
| intel | optimization_for_tensorflow | >= 0 < 2.11.1 | 2.11.1 |
| msrc | azl3_tensorflow_2.11.1-1_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_tensorflow_2.11.1-1_on_cbl_mariner_2.0 | — | — |
| tensorflow | tensorflow | < 2.11.1 | 2.11.1 |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability exists in TensorFlow's QuantizeAndDequantize operation — monitor for exploitation attempts targeting this specific op via heap out-of-buffer read ↗
- →Affected versions are TensorFlow prior to 2.12.0 or 2.11.1; flag any environment running older versions as at-risk for crash or RCE ↗
- ·Scope is listed as local, limiting remote exploitation surface in default configurations ↗
- ·Fix is available in TensorFlow 2.12.0 and backported to 2.11.1; environments not yet patched remain exposed ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_debian9.8LOW
vendor_msrc9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
vendor_msrc·2023-03-14·CVSS 9.8
CVE-2023-25668 [CRITICAL] CWE-122 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
GitHub_M: GitHub_M
Customer Action Required: Yes
Remediation: CBL-Mari
Debian
CVE-2023-25668: tensorflow - TensorFlow is an open source platform for machine learning. Attackers using Tens...
vendor_debian·2023·CVSS 9.8
CVE-2023-25668 [CRITICAL] CVE-2023-25668: tensorflow - TensorFlow is an open source platform for machine learning. Attackers using Tens...
TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.
Scope: local
forky: resolved
sid: resolved
GHSA
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
ghsa·2023-03-24
CVE-2023-25668 [CRITICAL] CWE-122 TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
### Impact
Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.
When axis is larger than the dim of input, c->Dim(input,axis) goes out of bound.
Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad operations too.
```python
import tensorflow as tf
@tf.function
def test():
tf.raw_ops.QuantizeAndDequantizeV2(input=[2.5],
input_min=[1.0],
input_max=[10.0],
signed_input=True,
num_bits=1,
range_given=True,
round_mode='HALF_TO_EVEN',
narrow_range=True,
axis=0x7fffffff)
test()
```
### Patches
We have patched the issue in GitHub commit [7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb](https://github.com
OSV
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
osv·2023-03-24
CVE-2023-25668 [CRITICAL] TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
### Impact
Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.
When axis is larger than the dim of input, c->Dim(input,axis) goes out of bound.
Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad operations too.
```python
import tensorflow as tf
@tf.function
def test():
tf.raw_ops.QuantizeAndDequantizeV2(input=[2.5],
input_min=[1.0],
input_max=[10.0],
signed_input=True,
num_bits=1,
range_given=True,
round_mode='HALF_TO_EVEN',
narrow_range=True,
axis=0x7fffffff)
test()
```
### Patches
We have patched the issue in GitHub commit [7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb](https://github.com
No detection rules found.
No public exploits indexed.
https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccbhttps://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccbhttps://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96
2023-03-25
Published