PT-2023-20230

CVE-2023-25669

·

Publicado

2023-03-24

·

Atualizado

2026-07-13

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1
Description The issue arises when the stride and window size are not positive for tf.raw ops.AvgPoolGrad, potentially causing a floating point exception.
Recommendations For versions prior to 2.12.0, update to version 2.12.0 to resolve the issue. For versions prior to 2.11.1, update to version 2.11.1 to resolve the issue. As a temporary workaround, consider validating the stride and window size to ensure they are positive before using tf.raw ops.AvgPoolGrad.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
GHSA-RCF8-G8JV-VG6P
AZL-31207
AZL-35314
BIT-TENSORFLOW-2023-25669
PYSEC-2026-1964
PYSEC-2026-3236
PYSEC-2026-3366
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾