Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 66b10bda8895f4bfaf8c205361f0125cdf51f99b. It is best practice to apply a patch to resolve this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-75093 ONNX Initializer Loader Buffer Size Calculation Flaw in Sonos Tract https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75093
Post summary
The text merely announces CVE-2026-75093 and labels it as a buffer size calculation flaw without providing any exploit or remediation details.
CVE-2026-75093 A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the comp… https://www.cve.org/CVERecord?id=CVE-2026-75093
Post summary
The message announces CVE‑2026‑75093 affecting Sonos Tract up to version 0.23.4, pointing to the CVE record but lacking details on exploitation, remediation, or debunking.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-75093](https://github.com/sonos/tract/) A security vulnerability has been detected in s... https://github.com/sonos/tract/ #Vulnerability #CVE #ZeroDay
Post summary
The post alerts to a new CVE-2026-75093 vulnerability, linking to a GitHub repository that likely contains proof of concept code; no evidence of exploitation or patching is provided.