{"data":{"id":"1bf29113-6ba8-457d-89ff-9d0e2741ac8d","title":"CVE-2023-27506: Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an…","summary":"CVE-2023-27506 is an improper buffer restriction flaw (CWE-119) in the Intel(R) Optimization for Tensorflow software before version 2.12. An authenticated user with local access may be able to escalate privilege. NIST's CVSS 4.0 assessment has not yet been provided.","solution":"The source references Intel's vendor advisory at intel-sa-00840.html but does not state a specific fix, patched version or workaround in the text provided. Fixed version: not stated in source beyond affecting versions before 2.12.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-27506","publishedAt":"2023-08-11T07:15:23.817Z","cveId":"CVE-2023-27506","cweIds":["CWE-92","CWE-119"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["intel-tensorflow@< 2.12 (fixed: 2.12)","tensorflow-intel@< 2.12 (fixed: 2.12)","intel-tensorflow-avx512@< 2.12 (fixed: 2.12)"],"affectedPackageNames":["intel-tensorflow","tensorflow-intel","intel-tensorflow-avx512"],"affectedPackageRefs":["pypi:intel-tensorflow","pypi:tensorflow-intel","pypi:intel-tensorflow-avx512"],"affectedVendors":[],"affectedVendorsRaw":["Intel Optimization for TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0016,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":["GHSA-m2f8-v8q4-3m59"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:51.463Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2023-03-22T23:07:15.531Z","daysToFix":-142,"fixCheckedAt":"2026-10-29T21:46:54.075Z","capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"intel-tensorflow","fixedVersion":"2.12","matchedVersion":"2.12.0","fixReleasedAt":"2023-03-29T19:28:45.397Z","daysToFix":-135,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:46:53.924Z"},{"ecosystem":"pypi","name":"intel-tensorflow-avx512","fixedVersion":"2.12","matchedVersion":"2.12.0","fixReleasedAt":"2023-03-29T19:32:38.243Z","daysToFix":-135,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:46:53.924Z"},{"ecosystem":"pypi","name":"tensorflow-intel","fixedVersion":"2.12","matchedVersion":"2.12.0","fixReleasedAt":"2023-03-22T23:07:15.531Z","daysToFix":-142,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:46:53.924Z"}]}}