Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements. Materializing an untrusted UINT2, INT2, UINT4, INT4, or FLOAT4E2M1 tensor through onnx.numpy_helper.to_array() or onnx.reference.ReferenceEvaluator can therefore expand a small packed payload into a disproportionately large allocation and exhaust memory. This issue is fixed in version 1.22.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to
    1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled
    TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements.
    Materializing an untrusted UINT2, INT2, UINT4, INT4, or FLOAT4E2M1 tensor through
    onnx.numpy_helper.to_array() or onnx.reference.ReferenceEvaluator can therefore expand a small packed
    payload into a disproportionately large allocation and exhaust memory. This issue is fixed in version
    1.22.0. (CVE-2026-115922)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to     1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled     TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements.
    Materializing an untrusted UINT2, INT2, UINT4, INT4, or FLOAT4E2M1 tensor through     onnx.numpy_helper.to_array() or onnx.reference.ReferenceEvaluator can therefore expand a small packed     payload into a disproportionately large allocation and exhaust memory. This issue is fixed in version     1.22.0. (CVE-2026-115922)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477769	SCA: security update for onnx (GHSA-q69g-f4f5-v8m7)	Tenable Cloud Security	SCA Checks	Local	medium
477769	SCA: security update for onnx (GHSA-q69g-f4f5-v8m7)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
372316	Linux Distros Unpatched Vulnerability : CVE-2026-115922	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-115922

medium

Tenable Plugins

medium

medium

medium