repository icon
onnx / onnx Project repository

Open standard for machine learning interoperability

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN12 DAYS

FIX

WITHINN/A DAYS

Uncontrolled recursion in ONNX text parser (Parse(TypeProto&)) causes stack-over...
vkehs58-oss
self closed
Uncontrolled recursion in ONNX text parser (Parse(TypeProto&)) causes stack-over...
vkehs58-oss
self closed
Regular Expression Denial of Service (ReDoS) in RegexFullMatch Operator
abdugafforov-bobur
self closed
ONNX checker accepts tensors with data shorter than declared dimensions, leading...
usernamebiasa
self closed
Recursive Stack Exhaustion in ONNX numpy_helper via Deeply Nested Sequences
galanzi2580-wq
self closed
Denial of Service via Unbounded Memory Allocation in Sub-byte Packed Types
surrealgrain
self closed
Integer overflow in sparse tensor dimension product bypasses bounds validation i...
bersechub
self closed
Unchecked integer arithmetic in ParseData causes DoS and silent shape truncation...
jd-admrl-ai
self closed
Arbitrary file overwrite in onnx.model_container.ModelContainer.save() via symli...
9to5ai
self closed
CWE-190: Integer Overflow in Dimension Multiplication Helpers Affects Flatten, T...
marchantdev
self closed
Integer Overflow in Reshape Shape Inference Produces Incorrect Dimensions (CWE-1...
marchantdev
self closed
Path traversal safety check bypass in _tar_members_filter() due to unsafe starts...
elucidator-hky
self closed
ONNX Path Traversal via startswith Prefix Collision. Sorry its supposed to be M...
williamzero9
self closed
Multiple Path Traversal Bypasses in ONNX: external_data symlink escape and tar e...
4ur0n
duplicate
High
Null Pointer Dereference in OneHot Shape Inference
sn1r
pending
Integer Overflow in onnx::ParseData leading to Denial of Service
sn1r
self closed
Out-of-bounds Heap Read in ONNX Version Converter Adapters
sn1r
duplicate
High
Unlimited Graph Nesting Depth in Visitor Pattern Enables Stack Overflow DoS via...
k2ito
pending
Integer Overflow in Dense Tensor Dimension Multiplication Bypasses Checker Valid...
k2ito
duplicate
Critical
Integer Overflow in Model Checker Tensor Validation Allows Malformed Models to P...
avienma007
duplicate
High
Path Traversal in convert_model_to_external_data
kai-agent
duplicate
High
Integer Overflow in ParseData Tensor Dimension Calculation Leading to Validation...
avienma007
duplicate
High
Remote Code Execution and Repository Compromise via `pull_request_target` Workfl...
zitoxxx
pending
Signed Integer Overflow in Sparse Tensor Bounds Check Allows Index Validation By...
zeroxjacks
duplicate
Medium
Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
zeroxjacks
duplicate
Medium
UNC Path Injection for NTLM Hash Theft
rezaduty
pending
Attribute Injection via setattr()
rezaduty
pending
Hub Path Traversal via Manifest
rezaduty
duplicate
Medium
Uncontrolled Resource Consumption and Stack Exhaustion via Crafted ONNX Models
hyperps
pending
[CWE-22] Path Traversal in _tar_members_filter Bypasses CVE-2024-5187 Fix
vnykmshr
duplicate
Low
Arbitrary File Read via ExternalData Hardlink Bypass in onnx.load
zeroxjacks
duplicate
Medium
Object State Corruption and Denial of Service via Unrestricted setattr() in Exte...
zeroxjacks
duplicate
High
Signed Integer Overflow in Sparse Tensor Bounds Check allowing Validation Bypass...
zeroxjacks
duplicate
High
Security Control Bypass in onnx.hub.load via silent=True leading to Silent Suppl...
zeroxjacks
pending
Directory Traversal via startswith() Bypass in _tar_members_filter
optimus-fulcria
pending
Integer Overflow in Tensor Size Validation Bypasses Data Consistency Check in Pa...
shima-coder
duplicate
High
Memory Exhaustion DoS via Unvalidated External Data Parameters in onnx.load() (C...
shima-coder
duplicate
Medium
Arbitrary Attribute Injection via setattr in ExternalDataInfo
loris4py
pending
Multiple Critical Denial-of-Service (DoS) and Logic Errors in ONNX Shape Inferen...
alielgendy-software
pending
Segmentation Fault (SIGSEGV) in version_converter.convert_version() via Crafted...
baguette168
pending
Integer Overflow in Tensor Dimension Validation Allows Checker Bypass
hallenee
duplicate
High
Buffer Over-read in Conv Shape Inference via Tensor Rank Mismatch
alielgendy-software
pending
Arbitrary File Write via Symlink Bypass in save_external_data
alielgendy-software
duplicate
High
ONNX Path Validation Bypass in External Data Loading
alielgendy-software
duplicate
Medium
Arbitrary Code Execution via Insecure Model Deserialization in ONNX
sebas5207418
pending
ONNX external_data_helper Arbitrary File Write via Path Traversal
mia-718ai
duplicate
High
Heap Buffer Over-read in ONNX Version Converter AxesInputToAttribute Adapter Due...
mia-718ai
pending
Path Traversal in save_external_data Allows Arbitrary File Write via Crafted ONN...
jhacksman
duplicate
Medium
Heap Buffer Overflow in ParseData() via Integer Division Truncation
spamblue890-oss
duplicate
High
Arbitrary File Read via Symlink Following in External Data Loading
nikshacks
duplicate
Medium
Path Traversal in ONNX Hub Manifest Allows Arbitrary File Write
alan-tiger
duplicate
High
Unsafe raw_data Handling in Tensor::data<T>() Allows Out-of-Bounds Access via Ma...
hyperps
self closed
Signed Integer Overflow in ONNX Model Checker via Malicious Tensor Dimensions
hyperps
pending
No symlinks bypass in external data validation allowing arbitrary file read via...
f00dat
duplicate
High
Denial of Service in ONNX Runtime via Unbounded Memory Allocation during Expand...
aldorizona10-glitch
pending
Stack Overflow DoS via Unbounded Recursion in ONNX Model Processing
vitalysim
pending
Heap overflow
shemshallah
pending
ONNX Runtime does not validate dimensional consistency of tensors i
shemshallah
pending
Unsafe use of PyTorch torch.load() in ONNX can lead to Arbitrary Code Execution...
ko7-dev
self closed
ONNX Path Traversal
elexs1zz
pending
Command Injection
loaymorad
pending
Exploit ONNX Net Drawer via doc_string injection
meme-dm
pending
Arbitary File Overwrite in save_external_data
michealkeines
pending
File Creation Vulnerability with Potential Race Condition
hope4real
pending
Lack of Error Handling for Malformed Input in ONNX Model/Node Check
tugar2003
pending
Arbitrary File Overwrite in onnx/backend/test/runner/download_model in onnx/onnx
arashimu
High
•$750•CVE-2024-7776
RCE via Documentation Updates
avivkeller
informative
Critical
Arbitrary File Overwrite in download_model_with_test_data
sunrisexu
High
•$750•CVE-2024-5187
[https://github.com/onnx/onnx] Source repository compromise via GitHub actions w...
arunstar
informative
Critical