Skip to content
OtherMedium

CVE-2023-25660: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, whe…

Occurred
Mar 25, 2023
Published
Mar 25, 2023
Source
NVD CVE

Summary

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1.

Tags

  • CVE
  • CVE-2023-25660
  • cvss:HIGH

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: Software vulnerability causing segfault in TensorFlow library, not a specific AI safety incident.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source