Skip to contentOnnx Onnx vulnerabilities
- onnxONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsCVE-2026-115922Fix available6.2 Medium
- onnxONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributeCVE-2026-115921Fix available6.2 Medium
- onnxONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankCVE-2026-115920Fix available6.2 Medium
- onnxONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)CVE-2026-115919Fix available6.2 Medium
- onnxONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input ShapeCVE-2026-63632Fix available3.3 Low
- linuxfoundation onnxONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)CVE-2026-44512Fix available5.5 Medium
- onnxonnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-boundsCVE-2026-14647Fix available5.3 Medium
- onnx onnx-mlironnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hashCVE-2026-113292.0 Low
- linuxfoundation onnxONNX symlink-following and path-traversal arbitrary file writeCVE-2026-49114Fix available6.8 Medium
- linuxfoundation onnxONNX: External Data Symlink TraversalCVE-2026-34447Fix available5.5 Medium
- linuxfoundation onnxONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX loadCVE-2026-34446Fix available4.7 Medium
- linuxfoundation onnxONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.CVE-2026-34445Fix available8.6 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX: Path Traversal via SymlinkCVE-2026-27489Fix available8.7 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackCVE-2026-28500Fix available8.6 High
- onnx, onnx onnx/onnx +1 moreArbitrary File Overwrite in onnx/onnxCVE-2024-7776Fix available8.1 High
- linuxfoundation onnx, onnx onnx/onnx +1 moreArbitrary File Overwrite in download_model_with_test_data in onnx/onnxCVE-2024-5187Fix available8.8 High
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Out-of-bounds Read vulnerabilityCVE-2024-27319Fix available4.4 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Directory Traversal vulnerabilityCVE-2024-27318Fix available7.5 High
- linuxfoundation onnxDirectory Traversal in onnxCVE-2022-25882Fix available7.5 High