PyPI: tensorflow-macos
CVE-2023-25671
Safety vulnerability ID: SFTY-20230325-00458
Safety legacy ID: pyup.io-58253
Tensorflow-macos 2.11.1 and 2.12.0 include a fix for CVE-2023-25671: There is out-of-bounds access due to mismatched integer type sizes. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6
Overview
TensorFlow has segmentation fault in tfg-translate
Advisory
Tensorflow-macos 2.11.1 and 2.12.0 include a fix for CVE-2023-25671: There is out-of-bounds access due to mismatched integer type sizes. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6
Affected Package
Also affects
---
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20230325-00458/CVE-2023-25671
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6
- https://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367
- https://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938
- https://nvd.nist.gov/vuln/detail/CVE-2023-25671
- https://github.com/advisories/GHSA-j5w9-hmfh-4cr6
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more