{"action":"Upgrade tensorflow-gpu to 2.5.3 or later.","affected":[{"fixed":"2.5.3","introduced":"0"},{"fixed":"2.6.3","introduced":"2.6.0"}],"component":"tensorflow-gpu","cve_ids":["CVE-2022-23559"],"ecosystem":"PyPI","epss":0.01183,"exploited":false,"fixed_versions":["2.5.3","2.6.3"],"ghsa_id":"GHSA-98p5-x8x4-c9m5","id":"tcs_01M5KGG1BGGNRBZ5SHXFYN08XQ","modified_at":"2026-07-13T16:43:02.718422275Z","published_at":"2022-02-04T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-123","https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5","https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4","https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043","https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-123","url":"https://osv.dev/vulnerability/PYSEC-2022-123"}],"summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_siz"}