ONNX: Denial Of Service Via Unchecked Expansion Of Packed Sub-byte Tensors In ONNX Python APIs

Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements. A very small model could therefore cause a disproportionately large allocation...

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements. A very small model could therefore cause a disproportionately large allocation...

GHSA-Q69G-F4F5-V8M7 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor dimensions without verifying that a packed sub-byte payload contained the declared number of elements. A very small model could therefore cause a disproportionately large allocation...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922

The Open Neural Network Exchange (ONNX) library is vulnerable to a Denial of Service (DoS) via memory exhaustion in versions prior to 1.22.0 . The vulnerability exists because the _unpack_2bit() and _unpack_4bit() functions resize unpacked arrays based on attacker-controlled TensorProto.dims with...

SUSE CVE-2026-39892

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers e.g. Hash.update, this could lead to buffer overflows. This vulnerability is fixed in...

ROS-20250505-31

A vulnerability in the libxml2 library is related to out-of-bounds reads that occur in Python APIs Python bindings due to an invalid return value. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service...

ROS-20250505-10

A vulnerability in the libxml2 library is related to out-of-bounds reads that occur in Python APIs Python bindings due to an invalid return value. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service...

ROS-20250424-34

A vulnerability in the libxml2 library is related to out-of-bounds reads that occur in Python APIs Python bindings due to an invalid return value. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service...

ROS-20250424-33

A vulnerability in the libxml2 library is related to out-of-bounds reads that occur in Python APIs Python bindings due to an invalid return value. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service...

ROS-20250424-13

A vulnerability in the libxml2 library is related to out-of-bounds reads that occur in Python APIs Python bindings due to an invalid return value. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service...

CVE-2024-0115

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss...

CVE-2024-0115: Uncontrolled Resource Consumption

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss...

CVE-2024-0115

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss...