CVE-2026-55093

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55093
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55093.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55093
Aliases
Downstream
Published
2026-09-14T19:47:46Z
Modified
2026-09-16T03:46:58Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVSS Calculator
Summary
tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load
Details

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-125",
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55093.json"
}
References

Affected packages

Git / github.com/sonos/tract

Affected ranges

Type
GIT
Repo
https://github.com/sonos/tract
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Introduced
2f8f99bc6c22ec44eba810eea49ca9602255408f
Introduced
bf90b4b9ef4099a25217ec0aef3d5b9aa0497e38
Fixed
2b3f2432a92dccbcdd3a6d1f856ab64252e9f5e9
Fixed
19a2c2a748e033ef1924ecfd3981afcb44592c15
Fixed
84b657a4023a45d639b95dcecf4df327c536d186
Fixed
34c7df2c9bd2a36583e09b52f3e6319bf23102e8
Fixed
828ec20f74c14c0923c7d7f0cff062ed222d630a
Fixed
ee5f019d39fb97f7d4431b883c3ce97b74c28a64
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.21.16"
        },
        {
            "introduced": "0.22.0"
        },
        {
            "fixed": "0.22.2"
        },
        {
            "introduced": "0.23.0"
        },
        {
            "fixed": "0.23.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.0.10
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7
0.0.8
0.0.9
0.10.10
0.10.5
0.10.6
0.10.7
0.10.8
0.10.9
0.11.0
0.11.1
0.11.2
0.12.1
0.12.2
0.12.4
0.12.5
0.13.0
0.13.1
0.13.2
0.14.0
0.14.1
0.14.2
0.15.0
0.15.1
0.15.2
0.15.4
0.15.5
0.15.7
0.15.8
0.16.0
0.16.1
0.16.3
0.16.4
0.16.5
0.16.6
0.16.7
0.16.8
0.16.9
0.17.0
0.17.1
0.17.2
0.17.3
0.17.4
0.17.7
0.18.0
0.18.1
0.18.2
0.18.3
0.19.0
0.19.0-alpha.17
0.19.0-alpha.18
0.19.0-alpha.19
0.19.0-alpha.8
0.19.1
0.19.2
0.20.18
0.20.19
0.20.2
0.20.20
0.20.21
0.20.22
0.20.3
0.20.4
0.20.5
0.20.6
0.21.0
0.21.1
0.21.10
0.21.11
0.21.12
0.21.13
0.21.14
0.21.15
0.21.2
0.21.3
0.21.4
0.21.5
0.21.6
0.21.7
0.21.8
0.21.9
0.21.branching
0.22.0
0.22.1
cli/0.*
cli/0.1.1
cli/0.10.0
cli/0.10.3
cli/0.10.4
cli/0.2.0
cli/0.2.1
cli/0.2.2
cli/0.2.4
cli/0.2.5
cli/0.2.7
cli/0.2.8
cli/0.3.0
cli/0.3.1
cli/0.3.2
cli/0.3.3
cli/0.4.0
cli/0.4.1
cli/0.4.2
cli/0.5.0
cli/0.5.1
cli/0.5.10
cli/0.5.11
cli/0.5.3
cli/0.5.4
cli/0.5.5
cli/0.5.6
cli/0.5.7
cli/0.5.8
cli/0.5.9
cli/0.6.0
cli/0.6.1
cli/0.6.2
cli/0.6.3
cli/0.7.0
cli/0.8.0
cli/0.9.0
cli/0.9.1
cli/0.9.2
core/0.*
core/0.1.1
core/0.10.0
core/0.10.3
core/0.10.4
core/0.2.0
core/0.2.1
core/0.2.2
core/0.2.4
core/0.2.5
core/0.2.7
core/0.2.8
core/0.3.0
core/0.3.1
core/0.3.2
core/0.3.3
core/0.4.0
core/0.4.1
core/0.4.2
core/0.5.0
core/0.5.1
core/0.5.10
core/0.5.11
core/0.5.3
core/0.5.4
core/0.5.5
core/0.5.6
core/0.5.7
core/0.5.8
core/0.5.9
core/0.6.0
core/0.6.1
core/0.6.2
core/0.6.3
core/0.9.0
core/0.9.1
core/0.9.2
hir/0.*
hir/0.10.0
hir/0.10.3
hir/0.10.4
hir/0.6.0
hir/0.6.1
hir/0.6.2
hir/0.6.3
hir/0.7.0
hir/0.8.0
hir/0.9.0
hir/0.9.1
hir/0.9.2
kaldi/0.*
kaldi/0.10.0
kaldi/0.10.3
kaldi/0.10.4
kaldi/0.4.0
kaldi/0.4.1
kaldi/0.4.2
kaldi/0.5.0
kaldi/0.5.1
kaldi/0.5.10
kaldi/0.5.11
kaldi/0.5.3
kaldi/0.5.4
kaldi/0.5.5
kaldi/0.5.6
kaldi/0.5.7
kaldi/0.5.8
kaldi/0.5.9
kaldi/0.6.0
kaldi/0.6.1
kaldi/0.6.2
kaldi/0.6.3
kaldi/0.7.0
kaldi/0.8.0
kaldi/0.9.0
kaldi/0.9.1
kaldi/0.9.2
linalg/0.*
linalg/0.10.0
linalg/0.10.3
linalg/0.10.4
linalg/0.2.0
linalg/0.2.1
linalg/0.2.2
linalg/0.2.4
linalg/0.2.5
linalg/0.2.7
linalg/0.2.8
linalg/0.3.0
linalg/0.3.1
linalg/0.3.2
linalg/0.3.3
linalg/0.4.0
linalg/0.4.1
linalg/0.4.2
linalg/0.5.0
linalg/0.5.1
linalg/0.5.10
linalg/0.5.11
linalg/0.5.3
linalg/0.5.4
linalg/0.5.5
linalg/0.5.6
linalg/0.5.7
linalg/0.5.8
linalg/0.5.9
linalg/0.6.0
linalg/0.6.1
linalg/0.6.2
linalg/0.6.3
linalg/0.7.0
linalg/0.8.0
linalg/0.9.0
linalg/0.9.1
linalg/0.9.2
nnef/0.*
nnef/0.10.4
onnx/0.*
onnx/0.1.1
onnx/0.10.0
onnx/0.10.4
onnx/0.2.0
onnx/0.2.1
onnx/0.2.2
onnx/0.2.4
onnx/0.2.5
onnx/0.2.7
onnx/0.2.8
onnx/0.3.0
onnx/0.3.1
onnx/0.3.2
onnx/0.3.3
onnx/0.4.0
onnx/0.4.1
onnx/0.4.2
onnx/0.5.0
onnx/0.5.1
onnx/0.5.10
onnx/0.5.11
onnx/0.5.3
onnx/0.5.4
onnx/0.5.5
onnx/0.5.6
onnx/0.5.7
onnx/0.5.8
onnx/0.5.9
onnx/0.6.0
onnx/0.6.1
onnx/0.6.2
onnx/0.6.3
onnx/0.7.0
onnx/0.8.0
onnx/0.9.0
onnx/0.9.1
onnx/0.9.2
tensorflow/0.*
tensorflow/0.1.1
tensorflow/0.10.0
tensorflow/0.10.3
tensorflow/0.10.4
tensorflow/0.2.0
tensorflow/0.2.1
tensorflow/0.2.2
tensorflow/0.2.4
tensorflow/0.2.5
tensorflow/0.2.7
tensorflow/0.2.8
tensorflow/0.3.0
tensorflow/0.3.1
tensorflow/0.3.2
tensorflow/0.3.3
tensorflow/0.4.0
tensorflow/0.4.1
tensorflow/0.4.2
tensorflow/0.5.0
tensorflow/0.5.1
tensorflow/0.5.10
tensorflow/0.5.11
tensorflow/0.5.3
tensorflow/0.5.4
tensorflow/0.5.5
tensorflow/0.5.6
tensorflow/0.5.7
tensorflow/0.5.8
tensorflow/0.5.9
tensorflow/0.6.0
tensorflow/0.6.1
tensorflow/0.6.2
tensorflow/0.6.3
tensorflow/0.7.0
tensorflow/0.8.0
tensorflow/0.9.0
tensorflow/0.9.1
tensorflow/0.9.2
v0.*
v0.10.10
v0.10.6
v0.10.7
v0.10.8
v0.10.9
v0.11.0
v0.11.1
v0.11.2
v0.12.1
v0.12.2
v0.12.4
v0.12.5
v0.13.0
v0.13.1
v0.13.2
v0.14.0
v0.14.1
v0.14.2
v0.15.0
v0.15.1
v0.15.2
v0.15.3
v0.15.4
v0.15.5
v0.15.7
v0.15.8
v0.16.0
v0.16.1
v0.16.3
v0.16.4
v0.16.5
v0.16.6
v0.16.7
v0.16.8
v0.16.9
v0.17.0
v0.17.1
v0.17.2
v0.17.3
v0.17.4
v0.17.7
v0.18.0
v0.18.1
v0.18.2
v0.18.3
v0.19.0
v0.19.0-alpha.17
v0.19.0-alpha.18
v0.19.0-alpha.19
v0.19.0-alpha.8
v0.19.1
v0.19.2
v0.20.18
v0.20.19
v0.20.2
v0.20.20
v0.20.21
v0.20.22
v0.20.3
v0.20.4
v0.20.5
v0.20.6
v0.21.0
v0.21.1
v0.21.10
v0.21.11
v0.21.12
v0.21.13
v0.21.14
v0.21.15
v0.21.2
v0.21.3
v0.21.4
v0.21.5
v0.21.6
v0.21.7
v0.21.8
v0.21.9
v0.21.branching
v0.22.0
v0.22.1
v0.23.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55093.json"