Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-h18h-987d-q7he
Vulnerability ID VCID-h18h-987d-q7he
Aliases CVE-2023-27579
GHSA-5w96-866f-6rm8
Summary Incorrect Comparison TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-697 Incorrect Comparison
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
There are no known severity scores.
Reference id Reference type URL
https://github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa
GHSA-5w96-866f-6rm8 https://github.com/advisories/GHSA-5w96-866f-6rm8
GHSA-5w96-866f-6rm8 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8
No exploits are available.
There are no known vectors.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-02T04:44:19.215735+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-gpu/CVE-2023-27579.yml 38.6.0