« Volver al listado

CVE-2026-55093

Estado: AplazadaMedia (6.1)—

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice.

Leer descripción completaMostrar menos

Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Tract — TractAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-55093",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-55093",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-14T20:09:04.689487Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "sonos",
          "product": "tract",
          "versions": [
            {
              "status": "affected",
              "version": "< 0.21.16"
            },
            {
              "status": "affected",
              "version": ">= 0.22.0, < 0.22.2"
            },
            {
              "status": "affected",
              "version": ">= 0.23.0, < 0.23.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-09-14T20:16:47.290",
  "references": [
    {
      "url": "https://github.com/sonos/tract/commit/34c7df2c9bd2a36583e09b52f3e6319bf23102e8",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/commit/828ec20f74c14c0923c7d7f0cff062ed222d630a",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/commit/ee5f019d39fb97f7d4431b883c3ce97b74c28a64",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/0.21.16",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/0.22.2",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/releases/tag/v0.23.1",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        },
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1."
    }
  ],
  "lastModified": "2026-09-30T17:51:56.193",
  "sourceIdentifier": "security-advisories@github.com"
}