low3.3
CVE-2026-63632
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Impact
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out-of-bounds read in Gemm_7_6::adapt_gemm_7_6() in onnx/version_converter/adapters/gemm_7_6.h when a Gemm node has input tensors with fewer than two dimensions because B_shape[1], A_shape[0], or A_shape[1] is accessed without a rank check, potentially causing a process crash during an opset 7 to 6 downgrade. This issue is fixed in version 1.22.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | onnx | >= 1.3.0, <= 1.21.0 | 1.22.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-p893-rvq9-2xf9
- https://github.com/onnx/onnx/security/advisories/GHSA-p893-rvq9-2xf9
- https://github.com/onnx/onnx/pull/7880
- https://github.com/onnx/onnx/commit/e9c74f596eaa0250f89e52a54160a25bbcb25b66
- https://github.com/onnx/onnx/releases/tag/v1.22.0