Skip to content
OpenAdvisories

Package · crates.io

tract-nnef

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-55093

    tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

    Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocati…

    Sonos tract ascan tract-nnef Wolfi crates.io