PT-2026-65674

tract nnef::tensors::read tensor builds a tensor shape from attacker-controlled 32-bit dimensions and computes both the element count productshape and the byte allocation productshape size ofdt with unchecked usize arithmetic. In release builds no overflow-checks both products wrap modulo 2^64. A...

PT-2026-50729

Name of the Vulnerable Software and Affected Versions tract-nnef versions prior to 0.21.16 tract-nnef versions 0.22.0 through 0.22.1 tract-nnef versions 0.23.0 Description An integer overflow exists in the read tensor function within the tract-nnef component and tract-data component. The software...