Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

HIGH 7.8CVE-2023-27506 · GHSA-m2f8-v8q4-3m59 · PYSEC-2026-1465 · Published 11/08/2023 · updated 17/06/2026

In short

CVE-2023-27506 is a HIGH (CVSS 7.8) vulnerability affecting intel-tensorflow, intel-tensorflow-avx512, tensorflow-intel.
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.3% of all vulnerabilities.
Fix: update to 2.12 or later.

Package	Affected versions	Patched versions
intel-tensorflow PyPI	`< 2.12`	`2.12`
intel-tensorflow-avx512 PyPI	`< 2.12`	`2.12`
tensorflow-intel PyPI	`< 2.12`	`2.12`
optimization for tensorflow intel	`< 2.12`	`2.12`

Description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

NVD description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

References

nvd.nist.gov/vuln/detail/CVE-2023-27506 · ADVISORY
intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html · WEB
pypi.org/project/intel-tensorflow-avx512 · PACKAGE
GitHub Advisory GHSA-m2f8-v8q4-3m59 · ADVISORY
pypi.org/project/intel-tensorflow · PACKAGE
pypi.org/project/tensorflow-intel · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free