CVE-2026-115921 | ONNX up to 1.21.x Scan Inference ScanInferenceFunction null pointer dereference

October 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ONNX up to 1.21.x. Affected is the function ScanInferenceFunction of the component Scan Inference. Executing a manipulation can lead to null pointer dereference.

This vulnerability appears as CVE-2026-115921. The attack requires local access. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More