5.5
Medium
CVE-2026-44512 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0 before 1.22.0, onnx.version_converter.convert_version() can dereference a null pointer in Upsample_6_7::adapt_upsample_6_7() in onnx/version_converter/adapters/upsample_6_7.h when processing an untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service. This issue is fixed in version 1.22.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| onnx 1.9 | 1.9.0 → < 1.22.0 | 1.22.0 |
References
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of onnx
The 14 CVEs of onnx →
CVE-2026-115922
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115921
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115920
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium
CVE-2026-115919
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Medium