CVE-2023-25669

7.5 highEPSS 0.4%

High (7.5) in google tensorflow. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in tensorflow 2.11.1.

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-697
Published: 2023-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:tensorflow

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-rcf8-g8jv-vg6p	PyPI	tensorflow	<2.11.1	2.11.1
GHSA-rcf8-g8jv-vg6p	PyPI	tensorflow-cpu	<2.11.1	2.11.1
GHSA-rcf8-g8jv-vg6p	PyPI	tensorflow-gpu	<2.11.1	2.11.1
PYSEC-2026-1964	PyPI	tensorflow-gpu	<2.11.1	2.11.1
PYSEC-2026-3236	PyPI	tensorflow	<2.11.1	2.11.1
PYSEC-2026-3366	PyPI	tensorflow-cpu	<2.11.1	2.11.1

References

Check your stack JSON