PYSEC-2026-3385

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-intel/PYSEC-2026-3385.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2026-3385

Aliases

Published

2026-07-13T14:20:01.735062Z

Modified

2026-07-13T16:43:39.480249482Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L CVSS Calculator

Summary

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Details

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

References

Affected packages

PyPI / tensorflow-intel

Package

Name: tensorflow-intel; View open source insights on deps.dev
Purl: pkg:pypi/tensorflow-intel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.12

Affected versions

0.*

0.0.1

2.*

2.10.0.dev20220728

2.10.0rc0

2.10.0rc1

2.10.0rc2

2.10.0rc3

2.10.0

2.10.1

2.11.0rc0

2.11.0rc1

2.11.0rc2

2.11.0

2.11.1

2.12.0rc0

2.12.0rc1

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-intel/PYSEC-2026-3385.yaml"