CVE-2023-25664
TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
Summary
TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
Original description
The description as published by the source.
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
PyPI
tensorflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
PyPI
tensorflow-cpu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
Bitnami
tensorflow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.0"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com