CVE-2026-115919

Name of the Vulnerable Software and Affected Versions Open Neural Network Exchange (ONNX) versions prior to 1.22.0

Description The RNNShapeInference opset1 to 6() function fails to verify that the first input has rank three when processing malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6. This allows the function to access dim(0) and dim(1) on an undersized protobuf shape, potentially reading outside the intended repeated field. This can lead to application termination when onnx.shape inference.infer shapes() processes an untrusted model that has passed onnx.checker.check model().

Recommendations Update to version 1.22.0.