AVID-2026-R1207

Description

TensorFlow has Segfault in Bincount with XLA (CVE-2023-25675)

Details

TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, tf.raw_ops.Bincount segfaults when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor. A fix is included in TensorFlow 2.12.0 and 2.11.1.

Reason for inclusion in AVID: The CVE describes a vulnerability in TensorFlow (an AI framework) that can cause a segfault in a core op (tf.raw_ops.Bincount) when using XLA, potentially enabling remote-triggered DoS/availability impact. This directly concerns AI software stacks and dependencies used to build/train/deploy AI systems, thus a software supply-chain vulnerability in general-purpose AI systems. The report provides the CVE, affected versions, a fix, and references, offering sufficient evidence.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score	7.5
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-697	CWE-697: Incorrect Comparison

Other information

Report Type: Advisory
Credits:
Date Reported: 2023-03-24
Version: 0.3.3
AVID Entry