onnx vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20251
3. 202613

Newest CVEs

• CVE-2026-115922

  ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

  onnx · onnx

  Medium6.2
• CVE-2026-115921

  ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

  onnx · onnx

  Medium6.2
• CVE-2026-115920

  ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

  onnx · onnx

  Medium6.2
• CVE-2026-115919

  ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

  onnx · onnx

  Medium6.2
• CVE-2026-49114

  ONNX symlink-following and path-traversal arbitrary file write

  ONNX · ONNX

  Medium6.8
• CVE-2026-63632

  ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

  onnx · onnx

  Low3.3
• CVE-2026-44512

  ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

  onnx · onnx

  Medium5.5
• CVE-2026-11329

  onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash

  onnx · onnx-mlir

  Low2.0
• CVE-2026-34447

  ONNX: External Data Symlink Traversal

  onnx · onnx

  Medium5.5
• CVE-2026-34446

  ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

  onnx · onnx

  Medium4.7