Linux Foundation ONNX (Open Neural Network Exchange)

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

ONNX: Path Traversal via Symlink

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example "../../../etc/passwd"

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.

ONNX symlink-following and path-traversal arbitrary file write

ONNX: External Data Symlink Traversal

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load