PT-2023-20230

CVE-2023-25669

·

Published

2023-03-24

·

Updated

2026-07-13

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1
Description The issue arises when the stride and window size are not positive for tf.raw ops.AvgPoolGrad, potentially causing a floating point exception.
Recommendations For versions prior to 2.12.0, update to version 2.12.0 to resolve the issue. For versions prior to 2.11.1, update to version 2.11.1 to resolve the issue. As a temporary workaround, consider validating the stride and window size to ensure they are positive before using tf.raw ops.AvgPoolGrad.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
GHSA-RCF8-G8JV-VG6P
AZL-31207
AZL-35314
BIT-TENSORFLOW-2023-25669
PYSEC-2026-1964
PYSEC-2026-3236
PYSEC-2026-3366
Found an issue in the description? Have something to add? Feel free to write us 👾