PyPI/tensorflow-cpu CVE-2023-25670: high 7.5, EPSS 0.39%

TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

Action: Upgrade tensorflow-cpu to 2.11.1 or later.

pip install tensorflow-cpu==2.11.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3271
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w
• https://nvd.nist.gov/vuln/detail/CVE-2023-25670
• https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727
• https://github.com/tensorflow/tensorflow
• https://pypi.org/project/tensorflow-cpu
• https://github.com/advisories/GHSA-49rq-hwc3-x77w

CVE-2023-25670 · published 2026-07-13T14:19:59.080418Z · modified 2026-07-13T16:43:13.288639394Z · JSON