AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-hwpq-hmq9-wj77: ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

mediumvulnerability

security

Source: GitHub Advisory DatabaseJuly 7, 2026CVE-2026-44512

Summary

ONNX has a null pointer dereference (a crash caused by accessing invalid memory) in its version converter when processing Upsample nodes that have zero inputs. The converter checks that required attributes exist but fails to verify that the node actually has inputs before trying to access them, causing a crash (SIGSEGV) when converting models from opset version 6 to 7.

Solution / Mitigation

All affected adapters, including the Upsample_6_7 adapter, have been fixed in PR #7813. A full audit of all ~45 adapters identified eight adapters with the same unguarded indexed access vulnerability (cast_9_8, softmax_12_13, softmax_13_12, upsample_6_7, upsample_9_10, group_normalization_20_21, broadcast_forward_compatibility, upsample_9_8), and all have been corrected.