CVE-2023-25671

HIGH7.5EPSS 0.32%

TensorFlow has segmentation fault in tfg-translate

Published: 3/24/2023Modified: 5/20/2025

Description

TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Affected packages (3)

Bitnami/tensorflowfrom 0, < 2.12.0
PyPI/tensorflowfrom 0, < 2.11.1
PyPI/tensorflow-cpufrom 0, < 2.11.1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-25671
PATCHhttps://github.com/tensorflow/tensorflow
WEBhttps://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367
WEBhttps://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938
WEBhttps://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6