TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
References
| Link | Resource |
|---|---|
| https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d | Patch |
| https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68 | Patch Vendor Advisory |
Configurations
History
30 Mar 2023, 17:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68 - Patch, Vendor Advisory | |
| References | (MISC) https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d - Patch | |
| CPE | cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:* |
27 Mar 2023, 12:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-25 00:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-25667
Mitre link : CVE-2023-25667
CVE.ORG link : CVE-2023-25667
JSON object : View
Products Affected
- tensorflow
CWE
CWE-190
Integer Overflow or Wraparound