Skip to content
LLMMedium

CVE-2023-25659: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if …

Occurred
Mar 25, 2023
Published
Mar 25, 2023
Source
NVD CVE

Summary

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Tags

  • CVE
  • CVE-2023-25659
  • cvss:HIGH

Classification

Category confidence: 85%
Severity confidence: 90%

Rationale: TensorFlow vulnerability affects ML framework but does not involve autonomous agent behavior or direct user harm.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source