Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-esen-w1rc-73du
Vulnerability ID VCID-esen-w1rc-73du
Aliases CVE-2023-25674
GHSA-gf97-q72m-7579
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-476 NULL Pointer Dereference
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00391 https://api.first.org/data/v1/epss?cve=CVE-2023-25674
epss 0.00391 https://api.first.org/data/v1/epss?cve=CVE-2023-25674
epss 0.00391 https://api.first.org/data/v1/epss?cve=CVE-2023-25674
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-gf97-q72m-7579
cvssv3.1 7.5 https://github.com/tensorflow/tensorflow
generic_textual HIGH https://github.com/tensorflow/tensorflow
cvssv3.1 7.5 https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
generic_textual HIGH https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
ssvc Track https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
cvssv3.1 7.5 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
cvssv3.1_qr HIGH https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
generic_textual HIGH https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
ssvc Track https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-25674
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-25674
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-25674
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/tensorflow/tensorflow
https://nvd.nist.gov/vuln/detail/CVE-2023-25674
728113a3be690facad6ce436660a0bc1858017fa https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
GHSA-gf97-q72m-7579 https://github.com/advisories/GHSA-gf97-q72m-7579
GHSA-gf97-q72m-7579 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:16:05Z/ Found at https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:16:05Z/ Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-25674
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.60511
EPSS Score 0.00391
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:09:57.750688+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0