TI-2023-16844 Aliases CVE-2023-33976 GHSA-gjh7-xx4r-x345

TensorFlow segfault in array_ops.upper_bound

LOW 33CWE-190Published 2024-07-30 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-190 and the CVSS impact.

Summary

TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00432 37th percentileScored 2026-11-07

Fix Fixed tensorflow (tensorflow): 2.13.0tensorflow (PyPI): 2.12.1+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Google	tensorflow	before 2.13.0	2.13.0	Patch available	CNA
—	tensorflow (PyPI)	before 2.12.1	2.12.1	Patch available	GHSA-gjh7-xx4r-x345
—	tensorflow-cpu (PyPI)	before 2.12.1	2.12.1	Patch available	GHSA-gjh7-xx4r-x345
—	tensorflow-gpu (PyPI)	before 2.12.1	2.12.1	Patch available	GHSA-gjh7-xx4r-x345

tensorflow VendorGoogle Affected before 2.13.0 Fixed in 2.13.0 Patch available CNA
tensorflow (PyPI) Vendor— Affected before 2.12.1 Fixed in 2.12.1 Patch available GHSA-gjh7-xx4r-x345
tensorflow-cpu (PyPI) Vendor— Affected before 2.12.1 Fixed in 2.12.1 Patch available GHSA-gjh7-xx4r-x345
tensorflow-gpu (PyPI) Vendor— Affected before 2.12.1 Fixed in 2.12.1 Patch available GHSA-gjh7-xx4r-x345

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:google:tensorflow::::::::	before 2.13.0	Vulnerable	Google

cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:* Versions before 2.13.0 Vulnerable ·Google

Remediation

Fix · CNA tensorflow (tensorflow) Fixed in 2.13.0
Fix · GHSA-gjh7-xx4r-x345 tensorflow (PyPI) Fixed in 2.12.1 Advisory →
Fix · GHSA-gjh7-xx4r-x345 tensorflow-cpu (PyPI) Fixed in 2.12.1 Advisory →
Fix · GHSA-gjh7-xx4r-x345 tensorflow-gpu (PyPI) Fixed in 2.12.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-33976
2026-10-03 Alias added: GHSA-gjh7-xx4r-x345

References

Patch 2

Advisory 2

Other 1

https://github.com/tensorflow/tensorflow

TI-2022-20241 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07640 Integer overflow in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07627 Out of bounds read and write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07619 Out of bounds write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07613 Read and Write outside of bounds in TFLite CVSS 3.1HIGH 8.8
TI-2022-07612 Integer overflow in TFLite CVSS 3.1HIGH 8.8

See all 430 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences