CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115922
MEDIUMCVSS 6.2NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elem
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-72752 MEDIUM 6.5
- CVE-2026-50095 MEDIUM 6.1
- CVE-2026-116398 MEDIUM 6.5
- CVE-2026-116400 MEDIUM 6.5
- CVE-2026-115923 MEDIUM 6.5
- CVE-2026-115966 MEDIUM 6.5
- CVE-2026-115918 MEDIUM 6.5
- CVE-2026-115919 MEDIUM 6.2
- CVE-2026-115920 MEDIUM 6.2
- CVE-2026-115921 MEDIUM 6.2