GHSA-hwpq-hmq9-wj77: ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

Summary

GHSA-hwpq-hmq9-wj77 is a null pointer dereference in the Upsample 6→7 adapter of ONNX's version converter, `Upsample_6_7::adapt_upsample_6_7()` in `onnx/version_converter/adapters/upsample_6_7.h:31`. When `convert_version()` processes an Upsample node with zero inputs, the adapter reads `node->inputs()[0]` without checking the input count, causing a SIGSEGV crash on Release builds and an abort on Debug builds. Any application running `convert_version()` on untrusted models is affected, and a 107-byte proof of concept reproduces the crash on onnx 1.21.0 and 1.22.0.

Mitigation

The source states that a full audit of about 45 adapters found eight with the same unguarded indexed access, and that all eight, including upsample_6_7, have been fixed in PR #7813.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• onnxPyPINo LLM dependency detected · 18 tracked dependents

Related items

• MediumCVE-2026-109311: vLLM audio upload heap overflow via FFmpeg IAMF parserSimilar attack · NVD/CVE Database
• MediumCVE-2026-108748: Quarkus LangChain4j memory exhaustion in chat-scopes WebSocketSimilar attack · NVD/CVE Database
• HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories
• MediumHermes Agent - Pre-Authentication Memory ExhaustionSimilar attack · Tenable Research Advisories
• MediumGHSA-v36g-jcw9-x7cw: Pydantic AI: Excessive resource use when local web fetching converts nested HTMLSimilar attack · GitHub Advisory Database