CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25673 – TensorFlow has Floating Point Exception in TensorListSplit with XLA
https://notcve.org/view.php?id=CVE-2023-25673
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. • https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa https://github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh • CWE-697: Incorrect Comparison •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25674 – TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
https://notcve.org/view.php?id=CVE-2023-25674
TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1. • https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25675 – TensorFlow has Segfault in Bincount with XLA
https://notcve.org/view.php?id=CVE-2023-25675
TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a parameter `weights` that is neither the same shape as parameter `arr` nor a length-0 tensor. A fix is included in TensorFlow 2.12.0 and 2.11.1. • https://github.com/tensorflow/tensorflow/commit/8ae76cf085f4be26295d2ecf2081e759e04b8acf https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7x4v-9gxg-9hwj • CWE-697: Incorrect Comparison •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25676 – TensorFlow has null dereference on ParallelConcat with XLA
https://notcve.org/view.php?id=CVE-2023-25676
TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1. • https://github.com/tensorflow/tensorflow/commit/da66bc6d5ff466aee084f9e7397980a24890cd15 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6wfh-89q8-44jq • CWE-476: NULL Pointer Dereference •
CVSS: 8.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25801 – TensorFlow has double free in Fractional(Max/Avg)Pool
https://notcve.org/view.php?id=CVE-2023-25801
TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1. • https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q • CWE-415: Double Free •