CVE-2023-25658

7.5 highEPSS 0.4%

High (7.5) in google tensorflow. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in tensorflow 2.11.1.

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2023-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:tensorflow

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-68v3-g9cm-rmm6	PyPI	tensorflow	<2.11.1	2.11.1
GHSA-68v3-g9cm-rmm6	PyPI	tensorflow-cpu	<2.11.1	2.11.1
GHSA-68v3-g9cm-rmm6	PyPI	tensorflow-gpu	<2.11.1	2.11.1
PYSEC-2026-3120	PyPI	tensorflow	<2.11.1	2.11.1
PYSEC-2026-3286	PyPI	tensorflow-cpu	<2.11.1	2.11.1
PYSEC-2026-960	PyPI	tensorflow-gpu	<2.11.1	2.11.1

References

Check your stack JSON