Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-115920 · GHSA-6pwm-x34p-fvj2

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

Risk score
44/100
CVSS
6.2 v3.1
Exploit chance (30 days)
0.2%
Published
26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the input's s…
Affected
onnx (pip) >= 1.2.1, <= 1.21.0
Fix
Upgrade onnx to 1.22.0 or later.
Exploitation
No known exploitation

Story map

Story map: onnxTHE FLAWSTHE FIXCVE-2026-115920ONNX: Out-of-bounds read inConvTranspose shape inferencevia undersized weight rankCVSS 6.2 · EPSS 0%CVE-2026-115922ONNX: Denial of service viaunchecked expansion of packedsub-byte tensors in ONNX…CVSS 6.2 · EPSS 0%CVE-2026-115919ONNX: Out-of-Bounds Read inRNN/GRU/LSTM ShapeInference (Old Opsets…CVSS 6.2 · EPSS 0%CVE-2026-115921ONNX: Null Pointer Dereferencein ScanInferenceFunction Dueto Missing Required AttributeCVSS 6.2 · EPSS 0%Upgrade onnx1.22.0or later on your release lineWho is exposedonnx (pip) <= 1.21.0YELLOW · PLAN IT INonnxOpen Neural Network Exchange(ONNX) is an open standard formachine learninginteroperability. Prior to 1.22.0,_unpack_2bit() and_unpack_4bit() resize unpackedarrays according to…Where it standsNo known exploitationCONNECTS TOSame weaknessOut-of-bounds read (CWE-125)398 other warnings in 30 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

onnx: Yellow, plan it in. Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements. Materializing…

The flaws

  • CVE-2026-115920: ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank (CVSS 6.2 · EPSS 0%)
  • CVE-2026-115922: ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs (CVSS 6.2 · EPSS 0%)
  • CVE-2026-115919: ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) (CVSS 6.2 · EPSS 0%)
  • CVE-2026-115921: ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute (CVSS 6.2 · EPSS 0%)

The fix

Upgrade onnx: 1.22.0 or later on your release line

Who is exposed: onnx (pip) <= 1.21.0

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 6.2 medium
  • On your watchlist: PyPI

Affected packages

PackageEcosystemVulnerableFixed in
onnxpip>= 1.2.1, <= 1.21.01.22.0

References

Original description

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the input's spatial dimensions. The flaw affects convTransposeShapeInference_opset11() and the current inference path, and an untrusted model that can pass onnx.checker.check_model() can crash onnx.shape_inference.infer_shapes(), causing denial of service without demonstrated confidentiality or integrity impact. This issue is fixed in version 1.22.0.

Last activity 28 Oct 2026. Patch Forecast updates every hour.