TensorFlow FP Exception in TensorListSplit via XLA (before 2.12.0/2.11.1)
CVE-2023-25673 Published on March 25, 2023
TensorFlow has Floating Point Exception in TensorListSplit with XLA
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
Vulnerability Analysis
CVE-2023-25673 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Incorrect Comparison
The software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.
Products Associated with CVE-2023-25673
Want to know whenever a new CVE is published for Google Tensorflow? stack.watch will email you.
Affected Versions
tensorflow Version < 2.11.1 is affected by CVE-2023-25673Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.