CyberRota Analysis
AI-GeneratedThe vulnerability affects the Open Neural Network Exchange (ONNX) versions 1.3.0 to 1.22.0, specifically within the version_converter function, which can lead to an out-of-bounds read when handling Gemm nodes with insufficient input tensor dimensions. This flaw may result in a process crash during the downgrade from opset 7 to 6, potentially disrupting machine learning workflows. Organizations utilizing ONNX in their machine learning applications should prioritize upgrading to version 1.22.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out-of-bounds read in Gemm_7_6::adapt_gemm_7_6() in onnx/version_converter/adapters/gemm_7_6.h when a Gemm node has input tensors with fewer than two dimensions because B_shape[1], A_shape[0], or A_shape[1] is accessed without a rank check, potentially causing a process crash during an opset 7 to 6 downgrade. This issue is fixed in version 1.22.0.