VDB
CVE-2023-25668
CVE-2023-25668
PUBLISHED
KEV
CVSS 9.800000190734863 CRITICAL
TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.
EPSS 0.84% · 56.2th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.84%
56.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | tensorflow | 0 |
| Bitnami | tensorflow | 0 |
Timeline
- Mar 24, 2023 CVE Published
- Mar 25, 2023 EPSS Score
- Mar 25, 2023 PoC Published
- May 3, 2023 EPSS Score
- Jun 11, 2023 EPSS Score
- Aug 27, 2023 EPSS Score
- Oct 5, 2023 EPSS Score
- Nov 13, 2023 EPSS Score
- Dec 6, 2023 CVE Updated
- Dec 22, 2023 EPSS Score
- Jan 29, 2024 EPSS Score
- Apr 16, 2024 EPSS Score