Skip to content
OtherMedium

CVE-2023-25663: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, whe…

Occurred
Mar 25, 2023
Published
Mar 25, 2023
Source
NVD CVE

Summary

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1.

Tags

  • CVE
  • CVE-2023-25663
  • cvss:HIGH

Classification

Category confidence: 85%
Severity confidence: 90%

Rationale: Software vulnerability in TensorFlow library, not a direct AI safety incident involving harm or misuse.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source