THREATIST.IORead the docs No onnx vulnerabilities are listed in CISA KEV.
17 records
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious ta…
A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar file…
In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOFOLLOW/O_EXCL', after a non-atomic 'os.path.…
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or us…
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0.