CVE-2026-115920

Name of the Vulnerable Software and Affected Versions Open Neural Network Exchange (ONNX) versions 1.2.1 through 1.21.0

Description ConvTranspose shape inference processes a weight tensor with fewer than three dimensions that lacks a kernel shape attribute by deriving an empty effective kernel shape and indexing it for the input's spatial dimensions. This flaw affects the convTransposeShapeInference opset11() function and the current inference path. An untrusted model that passes onnx.checker.check model() can cause onnx.shape inference.infer shapes() to crash, resulting in a denial of service.

Recommendations Update Open Neural Network Exchange (ONNX) to version 1.22.0.