Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0 before 1.22.0, onnx.version_converter.convert_version() can dereference a null pointer in Upsample_6_7::adapt_upsample_6_7() in onnx/version_converter/adapters/upsample_6_7.h when processing an untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service. This issue is fixed in version 1.22.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0
    before 1.22.0, onnx.version_converter.convert_version() can dereference a null pointer in
    Upsample_6_7::adapt_upsample_6_7() in onnx/version_converter/adapters/upsample_6_7.h when processing an
    untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service.
    This issue is fixed in version 1.22.0. (CVE-2026-44512)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0     before 1.22.0, onnx.version_converter.convert_version() can dereference a null pointer in     Upsample_6_7::adapt_upsample_6_7() in onnx/version_converter/adapters/upsample_6_7.h when processing an     untrusted model with an Upsample node that has zero inputs, causing an unrecoverable denial of service.
    This issue is fixed in version 1.22.0. (CVE-2026-44512)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
474816	Echo: onnx: security update to 1.17.0-3+e4	Tenable Cloud Security	Echo Local Security Checks	Local	medium
474816	Echo: onnx: security update to 1.17.0-3+e4	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
326083	Linux Distros Unpatched Vulnerability : CVE-2026-44512	Nessus	Misc.	Local	medium
444472	SCA: security update for onnx (GHSA-hwpq-hmq9-wj77)	Tenable Cloud Security	SCA Checks	Local	medium
444472	SCA: security update for onnx (GHSA-hwpq-hmq9-wj77)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-44512

medium

Tenable Plugins

medium

medium

medium

medium

medium