CVE-2023-33976 json
TensorFlow segfault in array_ops.upper_bound
published 2024-07-30 2 y ago modified 2026-09-08 2 mo ago also BIT-tensorflow-2023-33976 , EUVD-2024-2351 , GHSA-gjh7-xx4r-x345 , PYSEC-2026-1962 , PYSEC-2026-3190 , PYSEC-2026-3331
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 37%
- public exploits
- 0
- none known
Summary
TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.
Patch / fix
- pypi tensorflow 2.12.1
- pypi tensorflow-cpu 2.12.1
- pypi tensorflow-gpu 2.12.1
- bitnami tensorflow 2.12.1
- google tensorflow 2.12.1
- google tensorflow-gpu 2.12.1
- google tensorflow-cpu 2.12.1
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.43% chance of exploitation in the next 30 days, higher than 37% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | tensorflow | <2.12.1 |
2.12.1 |
| pypi | tensorflow-cpu | <2.12.1 |
2.12.1 |
| pypi | tensorflow-gpu | <2.12.1 |
2.12.1 |
| bitnami | tensorflow | <2.12.1 |
2.12.1 |
Affected products
- tensorflow tensorflow
Classification
- Weakness
-
- CWE-190 Integer Overflow or Wraparound
References
-
github.com
/tensorflow/tensorflow/commit/6fa05df43b00038b048f4f0e51ef522da6532fec
web, patch
-
github.com
/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586
web, patch
-
github.com
/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345
web, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2023-33976
advisory, web
-
github.com
/tensorflow/tensorflow
package
-
pypi.org
/project/tensorflow-gpu
package
-
github.com
/advisories/GHSA-gjh7-xx4r-x345
advisory
-
pypi.org
/project/tensorflow
package
-
pypi.org
/project/tensorflow-cpu
package
Sources
- CVE List CVE-2023-33976
- GitHub Advisory GHSA-gjh7-xx4r-x345
- NVD CVE-2023-33976
- OSV BIT-tensorflow-2023-33976
- OSV PYSEC-2026-1962
- OSV PYSEC-2026-3190
- OSV PYSEC-2026-3331
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.