CVE-2026-44512

Name of the Vulnerable Software and Affected Versions Open Neural Network Exchange (ONNX) versions 1.9.0 through 1.21.0

Description Processing an untrusted model with an Upsample node containing zero inputs can lead to an unrecoverable denial of service. The issue occurs when the onnx.version converter.convert version() function calls Upsample 6 7::adapt upsample 6 7() in onnx/version converter/adapters/upsample 6 7.h. The adapter attempts to access the first element of the inputs array without verifying if the array is empty, resulting in a null pointer dereference (SIGSEGV).

Recommendations Update Open Neural Network Exchange (ONNX) to version 1.22.0.