{"data":{"id":"9f1b3cb7-8a14-4ce6-a40d-c88774fb33e4","title":"CVE-2026-115921: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0…","summary":"ONNX versions 1.4.0 through 1.22.0 contain a flaw in ScanInferenceFunction, ScanInferenceFunction_opset8 and ScanInferenceFunction_opset9, which do not safely validate the required num_scan_inputs attribute. A missing attribute is dereferenced as a null pointer, and a negative value is converted to size_t and can reach an oversized allocation path. An untrusted model can terminate or disrupt shape inference, including a negative-value model that passes onnx.checker.check_model().","solution":"Fixed in version 1.22.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-115921","publishedAt":"2026-10-26T18:17:39.990Z","cveId":"CVE-2026-115921","cweIds":["CWE-195","CWE-476"],"cvssScore":"6.2","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ONNX"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ONNX shape inference crash from malicious model scan attributes","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T06:10:23.116Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T06:10:28.151Z","patchAvailable":null,"disclosureDate":"2026-10-26T18:17:39.990Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}