← CVE Intelligence

CVE-2023-25667

TensorFlow vulnerable to segfault when opening multiframe gif PUBLISHED

Description (CNA)

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

Affected (CNA)

Vendor / productVersions
tensorflow / tensorflowaffected < 2.11.1

CWE

CWE-190

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.