CVE-2023-25674: TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
Published Mar 24, 2023
·Updated
TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
Affected Software
1 affected component
Google TensorFlow<2.12.0
Remediation
Event History
Mar 24, 2023
CVE Published
via MITRE·11:13 PM
Data Sourced
via MITRE·11:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this TensorFlow vulnerability?
The vulnerability ID for this TensorFlow vulnerability is CVE-2023-25674.
2
What is TensorFlow?
TensorFlow is an open source machine learning platform.
3
What is the severity of CVE-2023-25674?
The severity of CVE-2023-25674 is high with a CVSS score of 7.5.
4
What is the affected software for CVE-2023-25674?
The affected software for CVE-2023-25674 is Google TensorFlow versions prior to 2.12.0 and 2.11.1.
5
How can I fix the CVE-2023-25674 vulnerability?
To fix the CVE-2023-25674 vulnerability, update TensorFlow to version 2.12.0 or 2.11.1.