p PatchFirst

CVE-2026-14647

CVE-2026-14647 · onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Patch name: a7bf3a0f1d18bb62575236ef6e4944980c40e045. It is recommended to apply a patch to fix this issue.

CVSS 5.3 · Medium · EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • onnx

    Versions
    • 1.0: Affected
    • 1.1: Affected
    • 1.2: Affected
    • 1.3: Affected
    • 1.4: Affected
    • 1.5: Affected
    • 1.6: Affected
    • 1.7: Affected
    • 1.8: Affected
    • 1.9: Affected
    • 1.10: Affected
    • 1.11: Affected
    • 1.12: Affected
    • 1.13: Affected
    • 1.14: Affected
    • 1.15: Affected
    • 1.16: Affected
    • 1.17: Affected
    • 1.18: Affected
    • 1.19: Affected
    • 1.20: Affected
    • 1.21: Affected

    No fix published

  • onnx Debian:12

    Versions
    • 1.12.0-2
    • 1.13.1-1
    • 1.13.1-2
    • 1.13.1-3
    • 1.14.1-1
    • 1.14.1-2
    • 1.14.1-2.1
    • 1.14.1-2.1~exp1
    • 1.16.1-1
    • 1.16.2-1
    • 1.17.0-1
    • 1.17.0-2
    • 1.17.0-3
    • 1.19.1-1~exp1
    • 1.20.0-1
    • 1.20.0-1~exp1
    • 1.20.0-3
    • 1.20.0-4
    • 1.20.0-5
    • 1.20.0-6
    • 1.21.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Debian:13

    Versions
    • 1.17.0-3
    • 1.19.1-1~exp1
    • 1.20.0-1
    • 1.20.0-1~exp1
    • 1.20.0-3
    • 1.20.0-4
    • 1.20.0-5
    • 1.20.0-6
    • 1.21.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Debian:14

    Versions
    • 1.17.0-3
    • 1.19.1-1~exp1
    • 1.20.0-1
    • 1.20.0-1~exp1
    • 1.20.0-3
    • 1.20.0-4
    • 1.20.0-5
    • 1.20.0-6
    • 1.21.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Ubuntu:22.04:LTS

    Versions
    • 1.7.0+dfsg-3build1
    • 1.7.0+dfsg-3build2
    • 1.7.0+dfsg-3ubuntu1
    • 1.7.0+dfsg-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Ubuntu:Pro:24.04:LTS

    Versions
    • 1.13.1-3
    • 1.13.1-3build1
    • 1.14.1-2
    • 1.14.1-2.1
    • 1.14.1-2.1build1
    • 1.14.1-2.1build2
    • 1.14.1-2.1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Ubuntu:25.10

    Versions
    • 1.17.0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Ubuntu:26.10

    Versions
    • 1.20.0-1
    • 1.20.0-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • onnx Ubuntu:26.04:LTS

    Versions
    • 1.17.0-3build1
    • 1.20.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →