3.3
Faible
CVE-2026-63632 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out-of-bounds read in Gemm_7_6::adapt_gemm_7_6() in onnx/version_converter/adapters/gemm_7_6.h when a Gemm node has input tensors with fewer than two dimensions because B_shape[1], A_shape[0], or A_shape[1] is accessed without a rank check, potentially causing a process crash during an opset 7 to 6 downgrade. This issue is fixed in version 1.22.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| onnx 1.3 | 1.3.0 → < 1.22.0 | 1.22.0 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de onnx
Les 14 CVE de onnx →
CVE-2026-115922
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115921
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115920
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne
CVE-2026-115919
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability
6.2
Moyenne