CVE-2026-115922 | ONNX up to 1.21.x 2-bit/4-bit Tensor Unpacking _unpack_2bit/_unpack_4bit allocation of resources

October 26, 2026 Yanac

A vulnerability was found in ONNX up to 1.21.x. It has been classified as problematic. This affects the function _unpack_2bit/_unpack_4bit of the component 2-bit/4-bit Tensor Unpacking. This manipulation causes allocation of resources.

This vulnerability is handled as CVE-2026-115922. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More