{"id":"EUVD-2026-77792","revision":"1ecee443efaf4fffb89972cc7aeec6bc","records":[{"revision":"1ecee443efaf4fffb89972cc7aeec6bc","observedAt":"2026-11-05T13:47:56.636+00:00","statement":{"source":"euvd","id":"EUVD-2026-77792","aliases":["CVE-2026-55093","GHSA-x5mv-8wgw-29hg"],"title":"Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimen…","description":"Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","score":6.1,"severity":null}],"references":["https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg","https://github.com/sonos/tract/commit/34c7df2c9bd2a36583e09b52f3e6319bf23102e8","https://github.com/sonos/tract/commit/828ec20f74c14c0923c7d7f0cff062ed222d630a","https://github.com/sonos/tract/commit/ee5f019d39fb97f7d4431b883c3ce97b74c28a64","https://github.com/sonos/tract/releases/tag/0.21.16","https://github.com/sonos/tract/releases/tag/0.22.2","https://github.com/sonos/tract/releases/tag/v0.23.1"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-77792","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Sep 14, 2026, 7:47:46 PM","dateUpdated":"Sep 14, 2026, 8:09:24 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-77792","identifiers":["EUVD-2026-77792","CVE-2026-55093","GHSA-x5mv-8wgw-29hg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}