10 matches found
CVE-2026-55093
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
EUVD-2026-77792
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
CVE-2026-55093 tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
CVE-2026-55093
Tract (a self-contained TensorFlow/ONNX inference toolkit by Sonos) is affected by an integer overflow in tract-nnef's read_tensor function that leads to an out-of-bounds heap read when loading a crafted NNEF model archive. The unchecked usize multiplication over attacker-controlled tensor dimens...
CVE-2026-55093 tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
CVE-2026-55093 tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
CVE-2026-55093: Out-of-bounds Read
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs readtensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length...
tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)
tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: OSV:GHSA-X5MV-8WGW-29HG...
tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)
tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: GHSA-X5MV-8WGW-29HG...
tract-hir (>=0.11.0, <=0.12.5), tract-kaldi (>=0.11.0, <=0.20.7) +4 more potentially affected by CVE-2026-55093 via tract-nnef (>=0.11.2, <=0.20.7)
tract-nnef CARGO version =0.11.2, =0.11.0, =0.11.0, =0.19.10, =0.11.0, =0.11.0, =0.11.0, =0.20.7 Source cves: CVE-2026-55093 Source advisory: OSV:RUSTSEC-2026-0217...