Most recent entries from all

BIT-tensorflow-2023-25673 — TensorFlow has Floating Point Exception in TensorListSplit with XLA

Affected: Bitnami: tensorflow

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.

EUVD-2026-218382

fkie_cve-2023-25673

GHSA-647v-r7qq-24fh — TensorFlow has Floating Point Exception in TensorListSplit with XLA

Affected: PyPI: tensorflow, PyPI: tensorflow-cpu, PyPI: tensorflow-gpu

### Impact FPE in TensorListSplit with XLA ```python import tensorflow as tf

func = tf.raw_ops.TensorListSplit para = {'tensor': [1], 'element_shape': -1, 'lengths': [0]}

@tf.function(jit_compile=True) def fuzz_jit(): y = func(**para) return y

print(fuzz_jit()) ```

### Patches We have patched the issue in GitHub commit [728113a3be690facad6ce436660a0bc1858017fa](https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa).

The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1

### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution This vulnerability has been reported by r3pwnx

gsd-2023-25673

msrc_CVE-2023-25673 — TensorFlow has Floating Point Exception in TensorListSplit with XLA

msrc_CVE-2023-25673

PYSEC-2026-3115 — TensorFlow has Floating Point Exception in TensorListSplit with XLA