CVE-2023-25668

TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation

TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.

We have discovered 71 live websites that are affected by CVE-2023-25668.

Run a Free Instant Scan



Affected Software

Product  tensorflow
Category JavaScript Libraries
Vulnerable Domains71 live websites (72% of tensorflow install base)
Vulnerable Versions
  • from 0 through 2.12
Vulnerable Versions Count12 versions ( 71% of all versions)


Common Weakness Enumeration

CWE-122 Heap-based Buffer Overflow



Details

  • Published - Mar 24, 2023
  • Updated - Feb 19, 2025

Website Distribution by Country

Number of websites using CVE-2023-25668
United States52 websites


Germany4 websites
India4 websites
Korea, South2 websites
Netherlands2 websites
United Arab Emirates1 websites
Canada1 websites
Cyprus1 websites
Denmark1 websites

Website Distribution by TLD

Number of websites using CVE-2023-25668
.com34 websites
.net6 websites
.io2 websites
.org2 websites
.ch1 websites
.dk1 websites
.eu1 websites
.jp1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-25668

Top websites that are affected by CVE-2023-25668. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.com United States***,***
******.me United States*,***,***
***********.com United States*,***,***
**********.com United States*,***,***
************.com United States*,***,***
****.net United States*,***,***
***********.com United States*,***,***
**********.*****.agency United Arab Emirates*,***,***
*******.**.kr Korea, South*,***,***
**********.com Netherlands*,***,***
See full domain list

FAQ

CVE-2023-25668 is Heap-based Buffer Overflow in tensorflow
A total of 71 websites have been identified as vulnerable to CVE-2023-25668, based on global website indexing conducted by WebTechSurvey.
The tensorflow is affected by the CVE-2023-25668 vulnerability.
tensorflow versions up to and including 2.12 are vulnerable to CVE-2023-25668.