CVE-2023-25658

Advisory

Tensorflow 2.11.1 and 2.12.0 include a fix for CVE-2023-25658: Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad.
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6

Affected package

Affected versions

Fixed versions

Vulnerability changelog

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1. See CVE-2023-25658.


MISC:https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb: https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb
MISC:https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6

Resources

• https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25658