CVE-2026-14647: A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opse

A weakness was found in ONNX (a software format for AI models) versions up to 1.21.x that allows an out-of-bounds read (accessing memory outside the intended area). The vulnerability is in a function called convPoolShapeInference_opset19 and can be attacked remotely by someone with login access, though the attack code is now public.