PyPI/tensorflow-gpu CVE-2022-23594: high 8.8, EPSS 0.14%
Out of bounds read in Tensorflow
Action: Upgrade tensorflow-gpu to 2.7.1 or later.
pip install tensorflow-gpu==2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.1 | - |
Fixed versions
| 2.7.1 |
Sources
- osv: PYSEC-2026-752
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9x52-887g-fhc2
- https://nvd.nist.gov/vuln/detail/CVE-2022-23594
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/tree/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/ir/importexport
- https://pypi.org/project/tensorflow-gpu
- https://github.com/advisories/GHSA-9x52-887g-fhc2
CVE-2022-23594 · published · modified · JSON