4.4
Medium
CVE-2024-27319 Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and…
Description
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| onnx 1.15 | earliest → 1.15.0 | No fix stated |
Other CVEs of onnx
The 14 CVEs of onnx →
CVE-2026-115922
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115921
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115920
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115919
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium