Wind River Support Network

HomeDefectsLIN1021-5520

Fixed

LIN1021-5520 : Security Advisory - tensorflow - CVE-2023-25672

Created: Mar 26, 2023 Updated: Mar 29, 2023

Resolved Date: Mar 29, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

CREATE(Triage):(User=admin) CVE-2023-25672 (https://nvd.nist.gov/vuln/detail/CVE-2023-25672)

CVEs

CVE-2023-25672