CVE-2023-25673: Incorrect Comparison

March 25, 2023 (updated November 9, 2023)

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

References

github.com/advisories/GHSA-647v-r7qq-24fh
github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh

Code Behaviors & Features

Detect and mitigate CVE-2023-25673 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →