CVE-2023-25665: TensorFlow has Null Pointer Error in SparseSparseMaximum
Published Mar 24, 2023
·Updated
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when SparseSparseMaximum is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1.
Affected Software
1 affected component
Google TensorFlow<2.12.0
Remediation
Event History
Mar 24, 2023
CVE Published
via MITRE·11:39 PM
Data Sourced
via MITRE·11:39 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is TensorFlow?
TensorFlow is an open source platform for machine learning.
2
What is the vulnerability ID for this TensorFlow vulnerability?
The vulnerability ID for this TensorFlow vulnerability is CVE-2023-25665.
3
What is the severity of CVE-2023-25665?
The severity of CVE-2023-25665 is high with a severity value of 7.5.
4
What is the affected software of CVE-2023-25665?
The affected software of CVE-2023-25665 is Google TensorFlow versions up to 2.12.0.
5
How can I fix CVE-2023-25665?
To fix CVE-2023-25665, update your TensorFlow version to 2.12.0 or later.