Skip to content
AI Sec Watch
MediumVulnerability

CVE-2023-27506: Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an…

Source
NVD(opens in a new tab)
Identifier
CVE-2023-27506
Published
Record updated
View JSON
Affected
  • intel-tensorflow < 2.12
  • tensorflow-intel < 2.12
  • intel-tensorflow-avx512 < 2.12
Fixed in
2.12
  • intel-tensorflow 2.12 released March 29, 2023, 135 days before disclosure
  • tensorflow-intel 2.12 released March 22, 2023, 142 days before disclosure
  • intel-tensorflow-avx512 2.12 released March 29, 2023, 135 days before disclosure
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.2%

Summary

CVE-2023-27506 is an improper buffer restriction flaw (CWE-119) in the Intel(R) Optimization for Tensorflow software before version 2.12. An authenticated user with local access may be able to escalate privilege. NIST's CVSS 4.0 assessment has not yet been provided.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.