CVE-2023-33976
Fixed upstream EPSS <1%CVSS 7.5
TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.
Products: tensorflow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | tensorflow | 2.12.1 |
| PyPI | tensorflow-cpu | 2.12.1 |
| PyPI | tensorflow-gpu | 2.12.1 |