Onnx vulnerabilities

Products

• Onnx 17
• Onnx/onnx 2

Newest

• onnx ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs CVE-2026-115922 Fix available 6.2 MediumOctober 26, 2026
• onnx ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute CVE-2026-115921 Fix available 6.2 MediumOctober 26, 2026
• onnx ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank CVE-2026-115920 Fix available 6.2 MediumOctober 26, 2026
• onnx ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) CVE-2026-115919 Fix available 6.2 MediumOctober 26, 2026
• onnx ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape CVE-2026-63632 Fix available 3.3 LowJuly 24, 2026
• linuxfoundation onnx ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) CVE-2026-44512 Fix available 5.5 MediumJuly 7, 2026
• onnx onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds CVE-2026-14647 Fix available 5.3 MediumJuly 4, 2026
• onnx onnx-mlir onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash CVE-2026-11329 2.0 LowJune 5, 2026
• linuxfoundation onnx ONNX symlink-following and path-traversal arbitrary file write CVE-2026-49114 Fix available 6.8 MediumApril 1, 2026
• linuxfoundation onnx ONNX: External Data Symlink Traversal CVE-2026-34447 Fix available 5.5 MediumApril 1, 2026
• linuxfoundation onnx ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load CVE-2026-34446 Fix available 4.7 MediumApril 1, 2026
• linuxfoundation onnx ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. CVE-2026-34445 Fix available 8.6 HighApril 1, 2026
• linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 more ONNX: Path Traversal via Symlink CVE-2026-27489 Fix available 8.7 HighMarch 31, 2026
• linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 more ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack CVE-2026-28500 Fix available 8.6 HighMarch 16, 2026
• onnx, onnx onnx/onnx +1 more Arbitrary File Overwrite in onnx/onnx CVE-2024-7776 Fix available 8.1 HighMarch 20, 2025
• linuxfoundation onnx, onnx onnx/onnx +1 more Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx CVE-2024-5187 Fix available 8.8 HighJune 6, 2024
• linuxfoundation onnx, fedoraproject fedora +1 more Onnx Out-of-bounds Read vulnerability CVE-2024-27319 Fix available 4.4 MediumFebruary 23, 2024
• linuxfoundation onnx, fedoraproject fedora +1 more Onnx Directory Traversal vulnerability CVE-2024-27318 Fix available 7.5 HighFebruary 23, 2024
• linuxfoundation onnx Directory Traversal in onnx CVE-2022-25882 Fix available 7.5 HighJanuary 25, 2023