OtherMedium
CVE-2023-25801: TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops…
- Occurred
- Mar 25, 2023
- Published
- Mar 25, 2023
- Source
- NVD CVE
Summary
TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1.
Tags
- CVE
- CVE-2023-25801
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Software vulnerability in TensorFlow library requiring patch, not an AI safety incident involving harm or misuse.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8