CVE-2023-25669
- Source
- https://cve.org/CVERecord?id=CVE-2023-25669
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25669.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-25669
- Aliases
- Published
- 2023-03-24T23:32:57.394Z
- Modified
- 2026-02-18T20:15:46.171513Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
- Details
-
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for
tf.raw_ops.AvgPoolGrad, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-697" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25669.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25669.json
- https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p
- https://nvd.nist.gov/vuln/detail/CVE-2023-25669
Affected packages
Git / github.com/tensorflow/tensorflow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tensorflow/tensorflow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.12.0-rc0
0.12.0-rc1
0.12.1
0.5.0
0.6.0
v0.*
v0.10.0
v0.10.0rc0
v0.11.0
v0.11.0rc0
v0.11.0rc1
v0.11.0rc2
v0.12.0
v0.7.0
v0.7.1
v0.8.0rc0
v0.9.0
v0.9.0rc0
v1.*
v1.0.0
v1.0.0-alpha
v1.0.0-rc0
v1.0.0-rc1
v1.0.0-rc2
v1.1.0
v1.1.0-rc0
v1.1.0-rc1
v1.1.0-rc2
v1.12.0
v1.12.0-rc0
v1.12.0-rc1
v1.12.0-rc2
v1.12.1
v1.2.0
v1.2.0-rc0
v1.2.0-rc1
v1.2.0-rc2
v1.3.0-rc0
v1.3.0-rc1
v1.5.0
v1.5.0-rc0
v1.5.0-rc1
v1.6.0
v1.6.0-rc0
v1.6.0-rc1
v1.7.0
v1.7.0-rc0
v1.7.0-rc1
v1.8.0
v1.8.0-rc0
v1.8.0-rc1
v1.9.0
v1.9.0-rc0
v1.9.0-rc1
v1.9.0-rc2
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25669.json"
vanir_signatures
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"77882080666551476461091988126869788298",
"14751798414308601593547037292299610116",
"186603779206813586110989300800152859569",
"339301434809674733503942383301257351491"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2023-25669-3448da63",
"source": "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d",
"target": {
"file": "tensorflow/compiler/xla/client/padding.cc"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 385.0,
"function_hash": "62524228666018386517791940460882937267"
},
"signature_type": "Function",
"id": "CVE-2023-25669-3877bb37",
"source": "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d",
"target": {
"function": "ValidatePaddingValues",
"file": "tensorflow/compiler/xla/client/padding.cc"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"87337359510816090104621488682787228043",
"62944761659710497611937264023201193622",
"39118404380510442625860722532780924605",
"151861551080381015612388384576957062371",
"134959243603490885316672092424012342957",
"322878649295472244617738804195488347111",
"299538190014732427494288212414749027250",
"333942931738478338673747285879750783136",
"313473944306675594844114452826420303647",
"124093876259117123230797115653905996433",
"149734403105885717233653691008626060012",
"109268558531319589752125297961753928354",
"135155177934793152390638965256463530010",
"37470261469097968991783408863406023412",
"104155703821848840871649880010006095140",
"125890628079593901215456197153768391372",
"253298167036508079316107050416343603753",
"17337976291247998149900828195383569980",
"336641101882444255113111579792104022437",
"145708632002854190876070499569112221369",
"12810596445717319171721146095956150341",
"90782616557381332923554572738939895694",
"291175676348763541373917406535828337172",
"39031419578578656547771232502841990298",
"110346967406698834285280887154995098433",
"83677917648239448737287862073741616742",
"328533550645100423559324056737857270174",
"188792506011825466755781098391460460332",
"56389450955109944960706172291567840862",
"44828200328199025371381941664378023926",
"100709554461526015701981488704509964151",
"6904967326167605226727051385605928732",
"149842929210948409892546019824097182795",
"292080050305570961813103592221632631359",
"186665845194600434527412073441159009827",
"294320834273781628668600059170772786511",
"273059176733073792000371756620835174110",
"309873582703572732402469595879972035488",
"121123697754618373888246591537229396103",
"42511275438727618559613489125601839163",
"286387963015012004003677180459387567010",
"218149940769892309830996928386257578931",
"177029756061449411041422193766283682481",
"55691347988146256030574046512082716075",
"62016610934117599453933486266639821237",
"263469112057585267724803198003153928356",
"300110326374749774702377614138691264416",
"320793587632192480717727788118277771796",
"81959187606279625732637165225369387010",
"21977946029597871071779735676706936729",
"298462994618528604996486394020388561706",
"151373902630756741252272240262413260777",
"273539248125521080332956291536039124123",
"325461620721683006743382512762661307823",
"32723863425468125504222321704139789216",
"163091042930762423589872078951530630907",
"88207456817249540144264403627206883448",
"285423440439460059711563979625806098855",
"183533623217744019501440575955275953109",
"23743817036088020484751777836624704491",
"301339725517969319454340601143906967706",
"231346063703378382635352449652728605717",
"76472752409545040498165570042548156119",
"163091042930762423589872078951530630907",
"123870821152260374716301639675434363065",
"288703631168080634290883182263195443841",
"92351577120054770126739037049106764651",
"192057347788012419025235525676296797808",
"23743817036088020484751777836624704491",
"171978721264783617563404640738683121514",
"119059921300376635783841552765909880173",
"96344795909155906152571855221090486536",
"163091042930762423589872078951530630907",
"88207456817249540144264403627206883448",
"285423440439460059711563979625806098855",
"183533623217744019501440575955275953109",
"23743817036088020484751777836624704491",
"301339725517969319454340601143906967706",
"231346063703378382635352449652728605717",
"76472752409545040498165570042548156119"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2023-25669-687a1a56",
"source": "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d",
"target": {
"file": "tensorflow/compiler/tf2xla/kernels/pooling_ops.cc"
}
}
]