Wind River Support Network

HomeDefectsLIN1021-5476

Fixed

LIN1021-5476 : Security Advisory - tensorflow - CVE-2023-25665

Created: Mar 21, 2023 Updated: Mar 29, 2023

Resolved Date: Mar 29, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1.

https://nvd.nist.gov/vuln/detail/CVE-2023-25665

CVEs

CVE-2023-25665