CVE-2023-25674: Null Pointer Dereference
First published: Sat Mar 25 2023(Updated: )
TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google TensorFlow | <2.12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this TensorFlow vulnerability?
The vulnerability ID for this TensorFlow vulnerability is CVE-2023-25674.
What is TensorFlow?
TensorFlow is an open source machine learning platform.
What is the severity of CVE-2023-25674?
The severity of CVE-2023-25674 is high with a CVSS score of 7.5.
What is the affected software for CVE-2023-25674?
The affected software for CVE-2023-25674 is Google TensorFlow versions prior to 2.12.0 and 2.11.1.
How can I fix the CVE-2023-25674 vulnerability?
To fix the CVE-2023-25674 vulnerability, update TensorFlow to version 2.12.0 or 2.11.1.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- vendor/google
- canonical/google tensorflow