https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:32:10 +0000 https://cve.radiocsirt.org/vuln/bit-tensorflow-2023-25667 <p><strong>Affected:</strong> Bitnami: tensorflow</p> <p>TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 &lt;= num_frames * height * width * channels &lt; 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.</p> <p><strong>Affected:</strong> Bitnami: tensorflow</p> <p>TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 &lt;= num_frames * height * width * channels &lt; 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.</p> https://cve.radiocsirt.org/vuln/bit-tensorflow-2023-25667 https://cve.radiocsirt.org/vuln/euvd-2026-218408 EUVD-2026-218408 https://cve.radiocsirt.org/vuln/euvd-2026-218408 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25667 <p>TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 &lt;= num_frames * height * width * channels &lt; 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.</p> <p>TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 &lt;= num_frames * height * width * channels &lt; 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25667 https://cve.radiocsirt.org/vuln/ghsa-fqm2-gh8w-gr68 <p><strong>Affected:</strong> PyPI: tensorflow, PyPI: tensorflow-cpu, PyPI: tensorflow-gpu</p> <p>### Impact Integer overflow occurs when 2^31 &lt;= num_frames * height * width * channels &lt; 2^32, for example Full HD screencast of at least 346 frames. ```python import urllib.request dat = urllib.request.urlopen(&#39;https://raw.githubusercontent.com/tensorflow/tensorflow/1c38ad9b78ffe06076745a1ee00cec42f39ff726/tensorflow/core/lib/gif/testdata/3g_multiframe.gif&#39;).read() import tensorflow as tf tf.io.decode_gif(dat) ```</p> <p>### Patches We have patched the issue in GitHub commit [8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d](https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d).</p> <p>The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1</p> <p>### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.</p> <p>### Attribution This vulnerability has been reported by Andrei</p> <p><strong>Affected:</strong> PyPI: tensorflow, PyPI: tensorflow-cpu, PyPI: tensorflow-gpu</p> <p>### Impact Integer overflow occurs when 2^31 &lt;= num_frames * height * width * channels &lt; 2^32, for example Full HD screencast of at least 346 frames. ```python import urllib.request dat = urllib.request.urlopen(&#39;https://raw.githubusercontent.com/tensorflow/tensorflow/1c38ad9b78ffe06076745a1ee00cec42f39ff726/tensorflow/core/lib/gif/testdata/3g_multiframe.gif&#39;).read() import tensorflow as tf tf.io.decode_gif(dat) ```</p> <p>### Patches We have patched the issue in GitHub commit [8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d](https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d).</p> <p>The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1</p> <p>### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.</p> <p>### Attribution This vulnerability has been reported by Andrei</p> https://cve.radiocsirt.org/vuln/ghsa-fqm2-gh8w-gr68 https://cve.radiocsirt.org/vuln/gsd-2023-25667 gsd-2023-25667 https://cve.radiocsirt.org/vuln/gsd-2023-25667 https://cve.radiocsirt.org/vuln/msrc_cve-2023-25667 msrc_CVE-2023-25667 https://cve.radiocsirt.org/vuln/msrc_cve-2023-25667 https://cve.radiocsirt.org/vuln/pysec-2026-1961 <p><strong>Affected:</strong> PyPI: tensorflow-gpu</p> <p>### Impact Integer overflow occurs when 2^31 &lt;= num_frames * height * width * channels &lt; 2^32, for example Full HD screencast of at least 346 frames. ```python import urllib.request dat = urllib.request.urlopen(&#39;https://raw.githubusercontent.com/tensorflow/tensorflow/1c38ad9b78ffe06076745a1ee00cec42f39ff726/tensorflow/core/lib/gif/testdata/3g_multiframe.gif&#39;).read() import tensorflow as tf tf.io.decode_gif(dat) ```</p> <p>### Patches We have patched the issue in GitHub commit [8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d](https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d).</p> <p>The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1</p> <p>### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.</p> <p>### Attribution This vulnerability has been reported by Andrei</p> <p><strong>Affected:</strong> PyPI: tensorflow-gpu</p> <p>### Impact Integer overflow occurs when 2^31 &lt;= num_frames * height * width * channels &lt; 2^32, for example Full HD screencast of at least 346 frames. ```python import urllib.request dat = urllib.request.urlopen(&#39;https://raw.githubusercontent.com/tensorflow/tensorflow/1c38ad9b78ffe06076745a1ee00cec42f39ff726/tensorflow/core/lib/gif/testdata/3g_multiframe.gif&#39;).read() import tensorflow as tf tf.io.decode_gif(dat) ```</p> <p>### Patches We have patched the issue in GitHub commit [8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d](https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d).</p> <p>The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1</p> <p>### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.</p> <p>### Attribution This vulnerability has been reported by Andrei</p> https://cve.radiocsirt.org/vuln/pysec-2026-1961