PyPI/tensorflow CVE-2023-25664: high 7.5, EPSS 0.41%

TensorFlow has Heap-buffer-overflow in AvgPoolGrad

Action: Upgrade tensorflow to 2.11.1 or later.

pip install tensorflow==2.11.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3122
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hg6-5c2q-7rcr
• https://nvd.nist.gov/vuln/detail/CVE-2023-25664
• https://github.com/tensorflow/tensorflow/commit/ddaac2bdd099bec5d7923dea45276a7558217e5b
• https://github.com/tensorflow/tensorflow
• https://pypi.org/project/tensorflow
• https://github.com/advisories/GHSA-6hg6-5c2q-7rcr

CVE-2023-25664 · published 2026-07-13T14:20:00.097808Z · modified 2026-07-13T16:42:42.765945833Z · JSON