What’s Vulnerable › Products
onnx vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your onnx version is affected
Latest onnx vulnerabilities
- CVE-2026-115922 — ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs (CVSS 6.2)
- CVE-2026-115921 — ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute (CVSS 6.2)
- CVE-2026-115920 — ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank (CVSS 6.2)
- CVE-2026-115919 — ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) (CVSS 6.2)
- CVE-2026-49114 — ONNX symlink-following and path-traversal arbitrary file write (CVSS 7.1)
- CVE-2026-63632 — ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape (CVSS 3.3)
- CVE-2026-44512 — ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) (CVSS 5.5)
- CVE-2026-14647 — onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds (CVSS 4.3)
- CVE-2026-34447 — ONNX: External Data Symlink Traversal (CVSS 5.5)
- CVE-2026-34446 — ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load (CVSS 5.5)
- CVE-2026-34445 — ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. (CVSS 8.6)
- CVE-2026-27489 — ONNX: Path Traversal via Symlink (CVSS 7.5)
- CVE-2026-28500 — ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack (CVSS 9.1)
- CVE-2025-51480 — (CVSS 8.8)
- CVE-2024-5187 — Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx (CVSS 8.8)
- CVE-2024-27319 — (CVSS 9.1)
- CVE-2024-27318 — (CVSS 7.5)
- CVE-2022-25882 — (CVSS 7.5)