Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115921— ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

Quick assessment

Affected
onnx onnx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Open Neural Network Exchange（ONNX）是机器学习互操作性的开放标准。在版本 1.4.0 至 1.22.0 期间， 、 和 未能安全地验证必需的 属性。缺失该属性时，系统会将其作为空指针解引用；而负值则会被转换为 类型，从而触发异常的大规模内存分配路径。因此，不可信的模型可能导致形状推断过程终止或中断，包括那些能通过 验证的负值模型。该问题已在版本 1.22.0 中修复。

CVSS 6.2 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115921

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute
Source: CVE Program / CVE List V5
Vulnerability Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9 do not safely validate the required num_scan_inputs attribute. A missing attribute is dereferenced as a null pointer, while a negative value is converted to size_t and can reach an exceptional oversized allocation path. An untrusted model can therefore terminate or disrupt shape inference, including a negative-value model that can pass onnx.checker.check_model(). This issue is fixed in version 1.22.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
有符号至无符号转换错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
onnx onnx >= 1.4.0, < 1.22.0 -

II. Public POCs for CVE-2026-115921

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115921

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-115921 (2)

Vendor Advisories for CVE-2026-115921 (1)

Vendor Pages for CVE-2026-115921 (1)

Same Patch Batch · onnx · 2026-10-26 · 4 CVEs total

CVE-2026-115922 6.2 MEDIUM ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python
CVE-2026-115920 6.2 MEDIUM ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
CVE-2026-115919 6.2 MEDIUM ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

IV. Related Vulnerabilities

Same product: onnx
Same vendor: onnx
Same weakness: CWE-195