CVE-2026-115920: Out-of-Bounds Read in ONNX ConvTranspose Shape Inference

Vulnerability ID: CVE-2026-115920

CVSS Score: 6.2

Published: 2026-10-28

An out-of-bounds read vulnerability (CWE-125) exists in the Open Neural Network Exchange (ONNX) library across versions 1.2.1 prior to 1.22.0. The flaw occurs within the shape inference routines for the ConvTranspose operator when processing a model with a weight tensor rank less than three and an omitted kernel_shape attribute. Unchecked indexing into an empty vector triggers a memory segmentation fault, resulting in a Denial of Service (DoS) against applications inspecting or loading untrusted ONNX models.

TL;DR

ONNX versions 1.2.1 through 1.21.x fail to validate that the weight tensor of a ConvTranspose node has at least 3 dimensions before inferring the kernel shape.…