Memory Exhaustion Vulnerability in Open Neural Network Exchange Prior to Version 1.22.0
CVE-2026-115922

6.2MEDIUM

Key Information:

Vendor

Onnx

Status
Onnx
Vendor
CVE Published:
26 October 2026

What is CVE-2026-115922?

Prior to version 1.22.0, Open Neural Network Exchange (ONNX) contained vulnerabilities in the _unpack_2bit() and _unpack_4bit() functions, which allowed an attacker to control TensorProto.dims without proper validation of raw_data or int32_data. This flaw could lead to the creation of tensors with inappropriately large memory allocations, potentially exhausting system resources. The issue was resolved in version 1.22.0, improving the security and stability of the ONNX framework.

Affected Version(s)

onnx < 1.22.0

References

https://github.com/onnx/onnx/security/advisories/GHSA-q69...
x_refsource_CONFIRM
https://github.com/onnx/onnx/pull/8033
x_refsource_MISC
https://github.com/onnx/onnx/pull/8038
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.