CVE-2023-33976: Google Tensorflow

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will be included in TensorFlow 2.13 and will also cherrypick this commit on TensorFlow 2.12.

Affected products

• Google Tensorflow: before 2.13.0 (fixed in 2.13.0)

Published 2024-07-30. Last modified 2026-06-17.