CVE-2023-27506
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
CVE-2023-27506- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Weakness
- CWE-92
- Updated
- 2026-11-02
EUVDEUVD-2023-2324
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
EUVD-2023-2324- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m2f8-v8q4-3m59
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
GHSA-m2f8-v8q4-3m59- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
CVE-2023-27506- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-92, CWE-119
- Updated
- 2026-11-02
OSVGHSA-m2f8-v8q4-3m59
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
GHSA-m2f8-v8q4-3m59- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVPYSEC-2026-1465
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
PYSEC-2026-1465- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Updated
- 2026-11-02
OSVPYSEC-2026-2523
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
PYSEC-2026-2523- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Updated
- 2026-11-02
OSVPYSEC-2026-3385
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Record
PYSEC-2026-3385- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
intel-tensorflowPyPI |
before 2.12 | 2.12 |
tensorflow-intelPyPI |
before 2.12 | 2.12 |
intel-tensorflow-avx512PyPI |
before 2.12 | 2.12 |
intel-tensorflowPyPI |
before 2.12, plus listed versions 0.0.11.12.01.13.11.13.21.14.0 Show 17 moreShow less1.15.01.15.22.0.02.0.12.1.02.1.12.10.02.11.02.11.dev2022422.2.02.3.02.4.02.5.02.6.02.7.02.8.02.9.1 |
2.12 |
tensorflow-intelPyPI |
before 2.12, plus listed versions 0.0.12.10.02.10.0.dev202207282.10.0rc02.10.0rc1 Show 10 moreShow less2.10.0rc22.10.0rc32.10.12.11.02.11.0rc02.11.0rc12.11.0rc22.11.12.12.0rc02.12.0rc1 |
2.12 |
intel-tensorflow-avx512PyPI |
before 2.12, plus listed versions 0.0.12.10.02.10.dev2022302.11.02.11.dev202242 Show 7 moreShow less2.3.02.4.02.5.02.6.02.7.02.8.02.9.1 |
2.12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-27506 is a medium vulnerability (CVSS 5.5) in Intel Optimization For Tensorflow, published August 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. Fixed in intel-tensorflow 2.12.