CVE-2023-25669

published 2023-03-25

CVE-2023-25669: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	tensorflow	—	—
google	tensorflow	< 2.12.0	2.12.0
intel	optimization_for_tensorflow	>= 0 < 2.11.1	2.11.1
msrc	azl3_tensorflow_2.11.1-1_on_azure_linux_3.0	—	—
msrc	azure_linux_3.0_arm	—	—
msrc	azure_linux_3.0_x64	—	—
msrc	cbl2_tensorflow_2.11.1-1_on_cbl_mariner_2.0	—	—
tensorflow	tensorflow	< 2.11.1	2.11.1

CWE-697