CVE-2023-25666

TensorFlow AudioSpectrogram in versions prior to 2.12.0 and 2.11.1 is affected by a floating point exception that can cause a Denial of Service. The fix is included in TensorFlow 2.12.0 and in 2.11.1. Recommended action: upgrade to TensorFlow 2.12.0 or 2.11.1 (or newer) to remediate.

CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when SparseSparseMaximum is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1...

CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when SparseSparseMaximum is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1...

CVE-2023-25665

TensorFlow CVE-2023-25665 affects SparseSparseMaximum: inputting invalid sparse tensors can cause a NULL pointer dereference. Public docs list affected releases as pre-2.12.0 and pre-2.11.1, with fixes shipped in TensorFlow 2.12 and 2.11.1 respectively. IBM and partner advisories corroborate this...

CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation

TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick...

CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation

TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick...

CVE-2023-25668

TensorFlow CVE-2023-25668 affects TensorFlow prior to 2.12.0 and the 2.11.1 branch, where attackers can access heap memory outside user control, leading to a crash or remote code execution. The fix is to upgrade to TensorFlow 2.12.0 or cherry-pick the relevant commit onto TensorFlow 2.11.1. Affec...

CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation

TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick...

CVE-2023-25669 TensorFlow has Floating Point Exception in AvgPoolGrad with XLA

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for tf.rawops.AvgPoolGrad, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25669

TensorFlow CVE-2023-25669 affects TensorFlow before versions 2.12.0 and 2.11.1, where a non-positive stride or window in tf.raw_ops.AvgPoolGrad can trigger a floating point exception. A fix is included in TensorFlow 2.12.0 and 2.11.1. Mitigation consists of upgrading to these versions or later. I...

CVE-2023-25669 TensorFlow has Floating Point Exception in AvgPoolGrad with XLA

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for tf.rawops.AvgPoolGrad, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25670

TensorFlow contains a null pointer dereference in QuantizedMatMulWithBiasAndDequantize when MKL is enabled, affecting prior releases. The issue affects TensorFlow versions before 2.12.0 and before 2.11.1, with a fix included in TensorFlow 2.12.0 and 2.11.1. Remediation is to upgrade to one of the...

CVE-2023-25671 TensorFlow has segmentation fault in tfg-translate

TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25671

TensorFlow vulnerability CVE-2023-25671: out-of-bounds access due to mismatched integer type sizes. Affected: TensorFlow 2.x releases prior to 2.11.1 and 2.x releases prior to 2.12.0. Impact is denial of service via out-of-bounds read; no exploitation details provided in the sources. Remediation:...

CVE-2023-25671 TensorFlow has segmentation fault in tfg-translate

TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25672 TensorFlow has Null Pointer Error in LookupTableImportV2

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25672

CVE-2023-25672: TensorFlow vulnerability in tf.raw_ops.LookupTableImportV2 causes a NULL pointer dereference when values is scalar, enabling denial of service. Fixes are in TensorFlow 2.12.0 and 2.11.1; IBM/partner advisories reference remediation guidance and affected IBM products may require up...

CVE-2023-25672 TensorFlow has Null Pointer Error in LookupTableImportV2

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...