CVE-2026-115922

The Open Neural Network Exchange (ONNX) library is vulnerable to a Denial of Service (DoS) via memory exhaustion in versions prior to 1.22.0 . The vulnerability exists because the _unpack_2bit() and _unpack_4bit() functions resize unpacked arrays based on attacker-controlled TensorProto.dims with...