{"id":"CVE-2023-25667","summary":"TensorFlow vulnerable to segfault when opening multiframe gif","details":"TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 \u003c= num_frames * height * width * channels \u003c 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n","aliases":["BIT-tensorflow-2023-25667","GHSA-fqm2-gh8w-gr68","PYSEC-2026-1961","PYSEC-2026-3176","PYSEC-2026-3321"],"modified":"2026-08-12T13:32:26.146749Z","published":"2023-03-24T23:40:20.893Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25667.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-190"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25667.json"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25667"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tensorflow/tensorflow","events":[{"introduced":"0"},{"fixed":"0db597d0d758aba578783b5bf46c889700a45085"},{"fixed":"8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.12.0"}]}}],"versions":["v2.12.0-rc1","v2.12.0-rc0","v1.12.1","v1.9.0-rc2","v1.6.0-rc1","v1.1.0-rc2","v1.1.0-rc1","0.6.0","0.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25667.json","vanir_signatures_modified":"2026-08-12T13:32:26Z","vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["75483344023816429105130490763696043289","5048300868609634787190383591664757390","330069613024145824126389773723531612521","40324363809392037008837474359697379798","40795313174366162036863075677102966814","196385181144489574157525661013123003497","336046903572298236129209819055494196297","199442846548475862059704899708917020185"]},"id":"CVE-2023-25667-101c4c4e","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d","target":{"file":"tensorflow/core/lib/gif/gif_io_test.cc"}},{"id":"CVE-2023-25667-557a8b5e","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d","target":{"file":"tensorflow/core/lib/gif/gif_io.cc"},"deprecated":false,"digest":{"line_hashes":["312683973966876362580114940459784222431","256899358402854129430259923433378709100","175686708388634474581516103812976608836","286495462731717484613262139888406739323","296220701238892890408272312498500066466","224032444667956843018123274678267778727","74568796020233128857535251786138762100","71064546818578940511665421790448513365","338006772525973745291982095005126614527","328576911163367567952297367932998870415","225099206183294977650354238225823640122","107051609724886551182225906509967148148","3192678925972932212101298233996880634","258753212494869283106847453344585987652","119583089973441725631259427846820220316","237339465516865318591457107639651870675","122306484358657262420960311130712746118","285050450174598028332036744045534940086","288181829055209924800595344131316769371","44515208220051684974659960553660683138","328430054474788384574424451433974647198","53997613645272902258063710718922258288","30587296236979998210241277004688842608"],"threshold":0.9}},{"source":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d","target":{"file":"tensorflow/core/lib/gif/gif_io_test.cc","function":"TEST"},"deprecated":false,"digest":{"function_hash":"310435308776820137343310569710633624191","length":435},"id":"CVE-2023-25667-5f0ac9d5","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["331991745603701478666292707411477669829","83389706465366460482737271557856530812","130546531829194270344518875144420595979","284370101128173431935723099030038545006","104189083286458946738289580258698154549","3917642976523126524882292132022801030","171546781220418346243506608980270902321","40535225766815957133357606536866158407","116232964464812411681059266209652247905"],"threshold":0.9},"id":"CVE-2023-25667-969a8977","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d","target":{"file":"tensorflow/core/kernels/image/decode_image_op.cc"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d","target":{"function":"TestDecodeGif","file":"tensorflow/core/lib/gif/gif_io_test.cc"},"deprecated":false,"digest":{"function_hash":"221575979870091091246827127066277084928","length":670},"id":"CVE-2023-25667-bb2a3e42"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}