CVE-2026-44512

Published: Jul 8, 2026Modified: Jul 13, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0 before 1.22.0, onnx.version_converter.convert_version() can dereference a null pointer in Upsample_6_7::adapt_upsample_6_7() in onnx/version_converter/adapters/upsample_6_7.h when processing an untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service. This issue is fixed in version 1.22.0.

Affected (1)

Products: Linuxfoundation: Onnx

Linuxfoundation

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linuxfoundation Onnx	From 1.9.0 to 1.22.0

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (5)

https://github.com/onnx/onnx/commit/cd310408165ad47c3cd7eb2b86cb5b80aa2e4fdf

Source: security-advisories@github.com

Patch

https://github.com/onnx/onnx/pull/7813

Source: security-advisories@github.com

Issue TrackingPatch

https://github.com/onnx/onnx/releases/tag/v1.22.0

Source: security-advisories@github.com

ProductRelease Notes

https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77

Source: security-advisories@github.com

ExploitVendor Advisory

https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitVendor Advisory

Timeline

No history available yet.