repository icon
onnx / onnx Project repository

Open standard for machine learning interoperability

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN18 DAYS

FIX

WITHINN/A DAYS

Arbitrary file overwrite in onnx.model_container.ModelContainer.save() via symli...
9to5ai
self closed
CWE-190: Integer Overflow in Dimension Multiplication Helpers Affects Flatten, T...
marchantdev
self closed
Integer Overflow in Reshape Shape Inference Produces Incorrect Dimensions (CWE-1...
marchantdev
self closed
Path traversal safety check bypass in _tar_members_filter() due to unsafe starts...
elucidator-hky
self closed
ONNX Path Traversal via startswith Prefix Collision. Sorry its supposed to be M...
williamzero9
self closed
Multiple Path Traversal Bypasses in ONNX: external_data symlink escape and tar e...
4ur0n
duplicate
High
Integer Overflow in onnx::ParseData leading to Denial of Service
sn1r
self closed
Path Traversal in convert_model_to_external_data
kai-agent
duplicate
High
Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
zeroxjacks
duplicate
Medium
Hub Path Traversal via Manifest
rezaduty
duplicate
Medium
Arbitrary File Read via ExternalData Hardlink Bypass in onnx.load
zeroxjacks
duplicate
Medium
Arbitrary File Write via Symlink Bypass in save_external_data
alielgendy-software
duplicate
High
ONNX Path Validation Bypass in External Data Loading
alielgendy-software
duplicate
Medium
ONNX external_data_helper Arbitrary File Write via Path Traversal
mia-718ai
duplicate
High
Path Traversal in save_external_data Allows Arbitrary File Write via Crafted ONN...
jhacksman
duplicate
Medium
Heap Buffer Overflow in ParseData() via Integer Division Truncation
spamblue890-oss
duplicate
High
Arbitrary File Read via Symlink Following in External Data Loading
nikshacks
duplicate
Medium
Path Traversal in ONNX Hub Manifest Allows Arbitrary File Write
alan-tiger
duplicate
High
Unsafe raw_data Handling in Tensor::data<T>() Allows Out-of-Bounds Access via Ma...
hyperps
self closed
No symlinks bypass in external data validation allowing arbitrary file read via...
f00dat
duplicate
High
Denial of Service in ONNX Runtime via Unbounded Memory Allocation during Expand...
aldorizona10-glitch
pending
Stack Overflow DoS via Unbounded Recursion in ONNX Model Processing
vitalysim
pending
Heap overflow
shemshallah
pending
ONNX Runtime does not validate dimensional consistency of tensors i
shemshallah
pending
Unsafe use of PyTorch torch.load() in ONNX can lead to Arbitrary Code Execution...
ko7-dev
self closed
ONNX Path Traversal
elexs1zz
pending
Command Injection
loaymorad
pending
Exploit ONNX Net Drawer via doc_string injection
meme-dm
pending
Arbitary File Overwrite in save_external_data
michealkeines
pending
File Creation Vulnerability with Potential Race Condition
hope4real
pending
Lack of Error Handling for Malformed Input in ONNX Model/Node Check
tugar2003
pending
Arbitrary File Overwrite in onnx/backend/test/runner/download_model in onnx/onnx
arashimu
High
•$750•CVE-2024-7776
RCE via Documentation Updates
avivkeller
informative
Critical
Arbitrary File Overwrite in download_model_with_test_data
sunrisexu
High
•$750•CVE-2024-5187
[https://github.com/onnx/onnx] Source repository compromise via GitHub actions w...
arunstar
informative
Critical