DailyCVE@dailycve
🟠 ONNX, Out-of-Bounds Read, #CVE-2026-115919 (Medium) -DC-Oct2026-3928 https://dailycve.com/onnx-out-of-bounds-read-cve-2026-115919-medium-dc-oct2026-3928/
0000030
247 followersView on X
CVE-2026-115919
LOWCVSS 6.2 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference_opset1_to_6() processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The function accesses dim(0) and dim(1) on an undersized protobuf shape, which can read outside the intended repeated field and terminate an application when onnx.shape_inference.infer_shapes() processes an untrusted model that can pass onnx.checker.check_model(). This issue is fixed in version 1.22.0.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-125
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day