CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-25667
High (7.5) in google tensorflow. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in tensorflow 2.11.1.
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:tensorflow
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fqm2-gh8w-gr68 | PyPI | tensorflow | <2.11.1 | 2.11.1 |
| GHSA-fqm2-gh8w-gr68 | PyPI | tensorflow-cpu | <2.11.1 | 2.11.1 |
| GHSA-fqm2-gh8w-gr68 | PyPI | tensorflow-gpu | <2.11.1 | 2.11.1 |
| PYSEC-2026-1961 | PyPI | tensorflow-gpu | <2.11.1 | 2.11.1 |
| PYSEC-2026-3176 | PyPI | tensorflow | <2.11.1 | 2.11.1 |
| PYSEC-2026-3321 | PyPI | tensorflow-cpu | <2.11.1 | 2.11.1 |
References
- https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68
- https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68