PYSEC-2026-3385

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

En bref

Publiée: 2026-07-13 14:20 UTC
Mise à jour: 2026-07-13 16:43 UTC
CVE: CVE-2023-27506
Alias: GHSA-m2f8-v8q4-3m59, PYSEC-2026-1465, PYSEC-2026-2523
CVSS_V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

Description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

Paquets affectés

Paquet	Versions
PyPI · tensorflow-intel	introduced 0, fixed 2.12

Références

https://nvd.nist.gov/vuln/detail/CVE-2023-27506 ADVISORY
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html WEB
https://pypi.org/project/tensorflow-intel PACKAGE
https://github.com/advisories/GHSA-m2f8-v8q4-3m59 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — PyPA Advisory Database