{"id":"CVE-2023-25669","summary":"TensorFlow has Floating Point Exception in AvgPoolGrad with XLA","details":"TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n","aliases":["BIT-tensorflow-2023-25669","GHSA-rcf8-g8jv-vg6p","PYSEC-2026-1964","PYSEC-2026-3236","PYSEC-2026-3366"],"modified":"2026-08-12T13:32:30.178495Z","published":"2023-03-24T23:32:57.394Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25669.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-697"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25669.json"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25669"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tensorflow/tensorflow","events":[{"introduced":"0"},{"fixed":"0db597d0d758aba578783b5bf46c889700a45085"},{"fixed":"1295ae4dbb52fe06b19733b0257e2340d7b63b8d"}],"database_specific":{"cpe":"cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.12.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v2.12.0-rc1","v2.12.0-rc0","v1.12.1","v1.9.0-rc2","v1.6.0-rc1","v1.1.0-rc2","v1.1.0-rc1","0.6.0","0.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25669.json","vanir_signatures_modified":"2026-08-12T13:32:30Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d","target":{"file":"tensorflow/compiler/xla/client/padding.cc"},"deprecated":false,"digest":{"line_hashes":["77882080666551476461091988126869788298","14751798414308601593547037292299610116","186603779206813586110989300800152859569","339301434809674733503942383301257351491"],"threshold":0.9},"id":"CVE-2023-25669-3448da63","signature_type":"Line"},{"id":"CVE-2023-25669-3877bb37","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d","target":{"file":"tensorflow/compiler/xla/client/padding.cc","function":"ValidatePaddingValues"},"deprecated":false,"digest":{"function_hash":"62524228666018386517791940460882937267","length":385}},{"digest":{"line_hashes":["87337359510816090104621488682787228043","62944761659710497611937264023201193622","39118404380510442625860722532780924605","151861551080381015612388384576957062371","134959243603490885316672092424012342957","322878649295472244617738804195488347111","299538190014732427494288212414749027250","333942931738478338673747285879750783136","313473944306675594844114452826420303647","124093876259117123230797115653905996433","149734403105885717233653691008626060012","109268558531319589752125297961753928354","135155177934793152390638965256463530010","37470261469097968991783408863406023412","104155703821848840871649880010006095140","125890628079593901215456197153768391372","253298167036508079316107050416343603753","17337976291247998149900828195383569980","336641101882444255113111579792104022437","145708632002854190876070499569112221369","12810596445717319171721146095956150341","90782616557381332923554572738939895694","291175676348763541373917406535828337172","39031419578578656547771232502841990298","110346967406698834285280887154995098433","83677917648239448737287862073741616742","328533550645100423559324056737857270174","188792506011825466755781098391460460332","56389450955109944960706172291567840862","44828200328199025371381941664378023926","100709554461526015701981488704509964151","6904967326167605226727051385605928732","149842929210948409892546019824097182795","292080050305570961813103592221632631359","186665845194600434527412073441159009827","294320834273781628668600059170772786511","273059176733073792000371756620835174110","309873582703572732402469595879972035488","121123697754618373888246591537229396103","42511275438727618559613489125601839163","286387963015012004003677180459387567010","218149940769892309830996928386257578931","177029756061449411041422193766283682481","55691347988146256030574046512082716075","62016610934117599453933486266639821237","263469112057585267724803198003153928356","300110326374749774702377614138691264416","320793587632192480717727788118277771796","81959187606279625732637165225369387010","21977946029597871071779735676706936729","298462994618528604996486394020388561706","151373902630756741252272240262413260777","273539248125521080332956291536039124123","325461620721683006743382512762661307823","32723863425468125504222321704139789216","163091042930762423589872078951530630907","88207456817249540144264403627206883448","285423440439460059711563979625806098855","183533623217744019501440575955275953109","23743817036088020484751777836624704491","301339725517969319454340601143906967706","231346063703378382635352449652728605717","76472752409545040498165570042548156119","163091042930762423589872078951530630907","123870821152260374716301639675434363065","288703631168080634290883182263195443841","92351577120054770126739037049106764651","192057347788012419025235525676296797808","23743817036088020484751777836624704491","171978721264783617563404640738683121514","119059921300376635783841552765909880173","96344795909155906152571855221090486536","163091042930762423589872078951530630907","88207456817249540144264403627206883448","285423440439460059711563979625806098855","183533623217744019501440575955275953109","23743817036088020484751777836624704491","301339725517969319454340601143906967706","231346063703378382635352449652728605717","76472752409545040498165570042548156119"],"threshold":0.9},"id":"CVE-2023-25669-687a1a56","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d","target":{"file":"tensorflow/compiler/tf2xla/kernels/pooling_ops.cc"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}