## ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-115922
- 公開日時: 2026-10-28T21:16:37.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-q69g-f4f5-v8m7)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-q69g-f4f5-v8m7

影響: pip:onnx <= 1.21.0 → 1.22.0
ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements. A very small model could therefore cause a disproportionately large allocation when an application called onnx.numpy_helper.to_array() or constructed onnx.reference.ReferenceEvaluator with the model. The issue affected UINT2, INT2, UINT4, INT4, and FLOAT4E2M1 tensors stored in either raw_…