CVE-2023-25672

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11.1 TensorFlow versions prior to 2.12.0

Description The function tf.raw ops.LookupTableImportV2 cannot handle scalars in the values parameter and gives a Null Pointer Exception (NPE). TensorFlow is an open source platform for machine learning.

Recommendations For versions prior to 2.11.1, update to version 2.11.1 to resolve the issue. For versions prior to 2.12.0, update to version 2.12.0 to resolve the issue. As a temporary workaround, consider avoiding the use of scalars in the values parameter of the tf.raw ops.LookupTableImportV2 function until a patch is applied.