ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

影響: pip:onnx <= 1.21.0 → 1.22.0

ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements. A very small model could therefore cause a disproportionately large allocation when an application called onnx.numpy_helper.to_array() or constructed onnx.reference.ReferenceEvaluator with the model. The issue affected UINT2, INT2, UINT4, INT4, and FLOAT4E2M1 tensors stored in either raw_…

GitHub Advisory Database에서 읽기

2026. 10. 29. 오전 06:16, GitHub Advisory Database에서 "ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "보통"(medium)입니다. 관련 기술: Python. CVE: CVE-2026-115922.