Denial of Service Vulnerability in Open Neural Network Exchange Product

CVE-2026-115920

What is CVE-2026-115920?

The Open Neural Network Exchange (ONNX) framework has a flaw in its ConvTranspose shape inference where a weight tensor with fewer than three dimensions, lacking a kernel_shape attribute, results in an uninitialized effective_kernel_shape. This can lead to a crash during the shape inference process when an untrusted model passes validation. While this vulnerability does not pose a risk to confidentiality or integrity, it can cause a denial of service in affected versions up to 1.22.0. The issue has been addressed in version 1.22.0.

References