CVE-2023-33976

Advisory

Affected versions of Tensorflow are vulnerable to Integer Overflow. array_ops.upper_bound' causes a segfault when not given a rank 2 tensor. The flaw was fixed in May 30, 2023, but the CVE was published in July 30, 2024. It was noticed unpublished by the Safety CLI Cyber Security team.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33976
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345
• https://github.com/tensorflow/tensorflow/commit/b35994ad3a00f1c364334d9b14bb54e693f22d27
• https://github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586
• https://github.com/tensorflow/tensorflow/issues/72441