CVEvulnerability

CVE-2024-27319

9.1 CRITICAL Published 2024-02-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-23
Last modified
2026-06-17
Assigner
6f8de1f0-f67e-45a6-b68f-98777fdb759c
CVSS 3.1 (6f8de1f0-f67e-45a6-b68f-98777fdb759c)
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125

Description

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

Affected configurations

• linuxfoundation onnx (< 1.16.0) • fedoraproject fedora 39 • fedoraproject fedora 40

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References