Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-27506 EUVD-2023-2324GHSA-m2f8-v8q4-3m59PYSEC-2026-1465PYSEC-2026-2523PYSEC-2026-3385

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Published Aug 11, 2023 · Updated Oct 2, 2024 · Assigned by intel

Description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) Optimization for Tensorflow software before version 2.12 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI intel-tensorflow < 2.12 2.12 GHSA-m2f8-v8q4-3m59
PyPI intel-tensorflow-avx512 < 2.12 2.12 GHSA-m2f8-v8q4-3m59
PyPI tensorflow-intel < 2.12 2.12 GHSA-m2f8-v8q4-3m59

References