Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-25660

TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tensorflow tensorflow

  • < 2.1.1affected

References