CVE-2024-27319CWE-125

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one…

Medium · published February 23, 2024

CVSS v3.1
4.4
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-02-23T17:39Z
EPSS history
Timeline
  • 23 FEB 17:39Z
    Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one…
    cvelistv5