PYSEC-2026-2523

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

At a glance

Published: 2026-07-13 14:20 UTC
Updated: 2026-07-13 16:43 UTC
CVE: CVE-2023-27506
Aliases: GHSA-m2f8-v8q4-3m59, PYSEC-2026-1465, PYSEC-2026-3385
CVSS_V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

Description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected packages

Package	Versions
PyPI · intel-tensorflow	introduced 0, fixed 2.12

References

https://nvd.nist.gov/vuln/detail/CVE-2023-27506 ADVISORY
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html WEB
https://pypi.org/project/intel-tensorflow PACKAGE
https://github.com/advisories/GHSA-m2f8-v8q4-3m59 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — PyPA Advisory Database