tract-nnf Integer Overflow Out-of-Bounds Read Vulnerability (RUSTSEC-2026-0217)

Vulnerability Overview Vulnerability ID: RUSTSEC-2026-0217 Description: An integer overflow in the NNEF tensor parser during model loading leads to an out-of-bounds read. CVSS Score: 6.1 (Medium) Report Date: June 18, 2026 Publication Date: July 28, 2026 Affected Versions Affected Package: (crates.io) Vulnerability Type: Memory Exposure, Denial of Service Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality Impact: None Integrity Impact: None Availability Impact: High Remediation Fixed Versions: - - - Fix Details: Upgrade to the aforementioned versions. The fix calculates shape multiplication and byte size correctly and rejects tensors if an overflow occurs (commit ). Description Vulnerability Details: constructs a tensor shape based on attacker-controlled 32-bit dimensions, computing the element count and byte allocation using unchecked arithmetic. In release builds (without ), both products wrap around modulo . Exploitation: A crafted NNEF tensor can specify dimensions whose wrapped product collapses to a small value that satisfies the header size consistency check, while the actual element count remains astronomically large. subsequently returns a where the reported (e.g., ) far exceeds its backing heap allocation (e.g., 56 bytes). The unchecked accessor ( ) then produces a slice spanning ~18 EiB over a small buffer. Impact: Out-of-bounds reads are triggered automatically during model construction (no inference required) and are reachable via the public API through the default resource loader, specifically when constant folding fast path materializes long constants. The always-enabled primitive results in a bounded adjacent heap out-of-bounds read (information disclosure); accessing beyond the mapped region causes a SIGSEGV (denial of service). Out-of-bounds writes or code execution have not been demonstrated. Mitigations Affected Versions: All release lines prior to the backported fix — , , and . Blockage Path: Similar block-size protections have already been received; the dense path was missed. Additional Information Keywords: #parsing #nnef #integer-overflow #out-of-bounds-read Aliases: CVE-2026-55093, GHSA-x5mv-8wgw-29hg References: - GitHub Advisory - GitHub Commit License License: CC0-1.0

Goal Reached Thanks to every supporter — we hit 100%!

tract-nnf Integer Overflow Out-of-Bounds Read Vulnerability (RUSTSEC-2026-0217)

More from this source