FKIE_CVE-2026-55093

Vulnerability from fkie_nvd - Published: 2026-09-14 20:16 - Updated: 2026-09-14 20:16
Severity
6.1 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Summary
Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1.
References
security-advisories@github.comhttps://github.com/sonos/tract/commit/34c7df2c9bd2a36583e09b52f3e6319bf23102e8
security-advisories@github.comhttps://github.com/sonos/tract/commit/828ec20f74c14c0923c7d7f0cff062ed222d630a
security-advisories@github.comhttps://github.com/sonos/tract/commit/ee5f019d39fb97f7d4431b883c3ce97b74c28a64
security-advisories@github.comhttps://github.com/sonos/tract/releases/tag/0.21.16
security-advisories@github.comhttps://github.com/sonos/tract/releases/tag/0.22.2
security-advisories@github.comhttps://github.com/sonos/tract/releases/tag/v0.23.1
security-advisories@github.comhttps://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg
134c704f-9b21-4f2e-91b3-4a467353bcc0https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "tract",
          "vendor": "sonos",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.21.16"
            },
            {
              "status": "affected",
              "version": "\u003e= 0.22.0, \u003c 0.22.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 0.23.0, \u003c 0.23.1"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1."
    }
  ],
  "id": "CVE-2026-55093",
  "lastModified": "2026-09-14T20:16:47.290",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 4.2,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-55093",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-14T20:09:04.689487Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-14T20:16:47.290",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/commit/34c7df2c9bd2a36583e09b52f3e6319bf23102e8"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/commit/828ec20f74c14c0923c7d7f0cff062ed222d630a"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/commit/ee5f019d39fb97f7d4431b883c3ce97b74c28a64"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/releases/tag/0.21.16"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/releases/tag/0.22.2"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/releases/tag/v0.23.1"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        },
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.