PyPI/tensorflow-cpu CVE-2023-33976: high 7.5, EPSS 0.43%
TensorFlow has segfault in array_ops.upper_bound
Action: Upgrade tensorflow-cpu to 2.12.1 or later.
pip install tensorflow-cpu==2.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12.1 | - |
Fixed versions
| 2.12.1 |
Sources
- osv: GHSA-gjh7-xx4r-x345#PyPI/tensorflow-cpu
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345
- https://nvd.nist.gov/vuln/detail/CVE-2023-33976
- https://github.com/tensorflow/tensorflow/commit/6fa05df43b00038b048f4f0e51ef522da6532fec
- https://github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586
- https://github.com/tensorflow/tensorflow
CVE-2023-33976 · published · modified · JSON