Arbitrary Code Injection

Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Arbitrary Code Injection via the parsemodel function in ultralytics/nn/tasks.py. An...

Memory Allocation with Excessive Size Value

Overview onnx is an Open Neural Network Exchange Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the ONNX model parser in onnx/defs/nn/defs.cc and related definition files, where a model can declare an extremely large tensor dimension e.g...

Signed to Unsigned Conversion Error

Overview onnx is an Open Neural Network Exchange Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error via the shape inference functions in onnx/defs/controlflow/utils.cc, onnx/defs/controlflow/old.cc, and onnx/defs/nn/defs.cc, where ctx.getAttribute can return a...

PT-2026-122235

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden dim/class num results in out-of-bounds read...

CVE-2026-111865

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865

A security flaw exists in the THU-MIG yoloe project (up to commit 40cd606cabdbe2b566d6f14a6b162c89206e9a1b) within the AutoBackend Model Loading component. The vulnerability affects the eval function in the file ultralytics/nn/autobackend.py . By manipulating the imgsz/names/kpt_shape arguments, ...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

EUVD-2026-103375

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

PT-2026-116504

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt shape results in improper...

CVE-2026-111865: Improper Neutralization of Directives in Dynamically Evaluated Code

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

THU-MIG Yoloe code injection vulnerability

THU-MIG Yoloe has a code injection vulnerability. This vulnerability stems from improper handling of parameters in the eval function of the ultralytics/nn/autobackend.py file within the AutoBackend Model Loading component. This improper handling leads to the of instructions in the dynamically...

CVE-2026-111212

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

CVE-2026-111237 Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument...

CVE-2026-111212

A security flaw exists in ImprintLab Medical-SAM-Adapter versions 0.1.0-alpha and 0.1.0 . The vulnerability is located within the AutoBackend Model Loading component, specifically in the session.get_modelmeta.custom_metadata_map function of the file models/MobileSAMv2/ultralytics/nn/autobackend.p...

CVE-2026-111212 ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

PT-2026-115366

Name of the Vulnerable Software and Affected Versions Ultralytics FastSAM versions up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52 Description An issue exists in the AutoBackend Model Loading component within the session.get modelmeta.custom metadata map function of the ultralytics/nn/autobackend....

PT-2026-115338

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get modelmeta.custom metadata map of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of th...

Imprint Lab Medical-SAM-Adapter Code Injection Vulnerability

The Imprint Lab Medical-SAM-Adapter versions 0.1.0-alpha and 0.1.0 contain a code injection vulnerability. This vulnerability stems from the operation of the session.getmodelmeta.custommetadatamap function in the AutoBackend Model Loading component’s file...