CVE-2026-55093

Tract (a self-contained TensorFlow/ONNX inference toolkit by Sonos) is affected by an integer overflow in tract-nnef's read_tensor function that leads to an out-of-bounds heap read when loading a crafted NNEF model archive. The unchecked usize multiplication over attacker-controlled tensor dimens...

CVE-2026-55093 tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...