Onnx · Onnx · CVE-2026-44512
**Name of the Vulnerable Software and Affected Versions**
Open Neural Network Exchange (ONNX) versions 1.9.0 through 1.21.0
**Description**
Processing an untrusted model with an Upsample node containing zero inputs can lead to an unrecoverable denial of service. The issue occurs when the `onnx.version converter.convert version()` function calls `Upsample 6 7::adapt upsample 6 7()` in `onnx/version converter/adapters/upsample 6 7.h`. The adapter attempts to access the first element of the inputs array without verifying if the array is empty, resulting in a null pointer dereference (SIGSEGV).
**Recommendations**
Update Open Neural Network Exchange (ONNX) to version 1.22.0.