Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-25667

TensorFlow vulnerable to segfault when opening multiframe gif

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tensorflow tensorflow

  • < 2.11.1affected

References