OtherMedium
CVE-2023-33976: TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` cause…
- Occurred
- Jul 30, 2024
- Published
- Jul 30, 2024
- Source
- NVD CVE
Summary
TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.
Tags
- CVE
- CVE-2023-33976
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 80%
Rationale: Software vulnerability causing segfault in TensorFlow library, not fitting other specific AI safety categories.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8