cvss9.8
how bad it is if exploited, out of 10
epss0.80%
chance of exploitation in the next 30 days
xyz score4.0
CyberXYZ composite, out of 10
fig. 01 — GHSA-gw97-ff7c-9v96, the advisory selected below
GHSA-gw97-ff7c-9v96
CRITICALCVE-2023-25668Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.
- Affected
- >=0, <2.12.0
- Fixed in
- 2.11.1
- Weakness
- CWE-122
- Published
- 2023-03-24
- Source
- github
GHSANVDMITRE
// ai model usageNo published models are known to use this package.
Checked 2026-09-22 at 03:30 UTC. The most recent advisory here was published 2024-07-30. Updated continuously from NVD, GHSA, OSV and CNA feeds.