CVE-2026-115921

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunctionopset8, and ScanInferenceFunctionopset9 do not safely validate the required numscaninputs attribute. A missing attribute is dereference...

CVE-2026-115921

The Open Neural Network Exchange (ONNX) library versions 1.4.0 through 1.22.0 are vulnerable to a Null Pointer Dereference in the ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9 components. The root cause is the failure to safely validate the required num_sca...