Skip to content
OtherMedium

CVE-2026-63632: Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From …

Occurred
Aug 18, 2026
Published
Aug 18, 2026
Source
NVD CVE

Summary

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out-of-bounds read in Gemm_7_6::adapt_gemm_7_6() in onnx/version_converter/adapters/gemm_7_6.h when a Gemm node has input tensors with fewer than two dimensions because B_shape[1], A_shape[0], or A_shape[1] is accessed without a rank check, potentially causing a process crash during an opset 7 to 6 downgrade. This issue is fixed in version 1.22.0.

Tags

  • CVE
  • CVE-2026-63632
  • cvss:LOW

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: CVE describes a technical vulnerability in ONNX library causing potential crash, not a safety incident with direct harm.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source