CVE-2023-27506

2023-08-1102:37:08

CWE-92

intel

www.cve.org

intel

optimization

tensorflow

software

version

privilege

local access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

EPSS

Percentile

9.0%

JSON

Improper buffer restrictions in the Intel® Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optimization for Tensorflow software",
    "versions": [
      {
        "version": "before version 2.12",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]