~ / search / GHSA-h8wv-9h96-m4hr

GHSA-h8wv-9h96-m4hr

Onnx Out-of-bounds Read vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-27319

Packages

EcosystemPackageAffectedFixed in
PyPI onnx < 1.16.0 1.16.0

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

References

External links from the advisory. They lead to third-party sites.