CVE-2023-25663
TensorFlow has Null Pointer Error in TensorArrayConcatV2
概要
TensorFlow has Null Pointer Error in TensorArrayConcatV2
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when ctx->step_containter() is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
PyPI
tensorflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
PyPI
tensorflow-cpu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
PyPI
tensorflow-gpu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
Bitnami
tensorflow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.0"}]}]
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com