TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
References
| Link | Resource |
|---|---|
| https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727 | Patch |
| https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w | Patch Vendor Advisory |
Configurations
History
07 Nov 2023, 04:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. |
30 Mar 2023, 17:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Google
Google tensorflow |
|
| References | (MISC) https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727 - Patch | |
| References | (MISC) https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w - Patch, Vendor Advisory |
25 Mar 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-25 00:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-25670
Mitre link : CVE-2023-25670
CVE.ORG link : CVE-2023-25670
JSON object : View
Products Affected
- tensorflow
CWE
CWE-476
NULL Pointer Dereference