CVE-2026-14647 - Vulnerability Details

- onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

Description

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Patch name: a7bf3a0f1d18bb62575236ef6e4944980c40e045. It is recommended to apply a patch to fix this issue.

Published: 2026-07-04

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A defect in the convPoolShapeInference_opset19 routine of the ONNX runtime triggers an out‑of‑bounds read (CWE‑119, CWE‑125) when processing particular ONNX model definitions. The vulnerability is exposed via the onnxruntime API. Based on the description, it is inferred that the attack vector involves supplying a malicious ONNX model that is loaded by the runtime during normal model handling.

Affected Systems

The vulnerability affects the ONNX library and its onnxruntime integration in all releases up to and including version 1.21.x. The affected code resides in onnx/defs/nn/old.cc, and systems that load ONNX models using the onnxruntime API are at risk.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. The EPSS score of < 1 % indicates a low overall likelihood of exploitation in the wild. The availability of a public exploit and the remote attack capability suggest that attackers could target vulnerable deployments. This inference points to a non‑zero but still low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

onnx

affected

Version	Status	Constraints
`1.0`	affected	—
`1.1`	affected	—
`1.2`	affected	—
`1.3`	affected	—
`1.4`	affected	—
`1.5`	affected	—
`1.6`	affected	—
`1.7`	affected	—
`1.8`	affected	—
`1.9`	affected	—
`1.10`	affected	—
`1.11`	affected	—
`1.12`	affected	—
`1.13`	affected	—
`1.14`	affected	—
`1.15`	affected	—
`1.16`	affected	—
`1.17`	affected	—
`1.18`	affected	—
`1.19`	affected	—
`1.20`	affected	—
`1.21`	affected	—

No data.

Vendor Product Confidence Versions

Onnx

95%

Version	Status	Scheme	Platform
`1.0`	affected	generic	—
`1.1`	affected	generic	—
`1.2`	affected	generic	—
`1.3`	affected	generic	—
`1.4`	affected	generic	—
`1.5`	affected	generic	—
`1.6`	affected	generic	—
`1.7`	affected	generic	—
`1.8`	affected	generic	—
`1.9`	affected	generic	—
`1.10`	affected	generic	—
`1.11`	affected	generic	—
`1.12`	affected	generic	—
`1.13`	affected	generic	—
`1.14`	affected	generic	—
`1.15`	affected	generic	—
`1.16`	affected	generic	—
`1.17`	affected	generic	—
`1.18`	affected	generic	—
`1.19`	affected	generic	—
`1.20`	affected	generic	—
`1.21`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the ONNX patch commit a7bf3a0f1d18bb62575236ef6e4944980c40e045, which fixes the out‑of‑bounds read identified as CWE‑125 and CWE‑119 in convPoolShapeInference_opset19.
Where a patch cannot be deployed immediately, limit the loading of external ONNX models to trusted sources and, if possible, sandbox the onnxruntime process to reduce the surface for memory disclosure stemming from the buffer over‑read vulnerability (CWE‑125).
Prior to loading models, perform strict validation or digital signature checks to ensure model files are well‑formed and unmodified; this mitigates the risk of crafted inputs triggering the out‑of‑bounds read.

Generated by OpenCVE AI on July 24, 2026 at 09:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00253.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/onnx/onnx/
https://github.com/onnx/onnx/commit/a7bf3a0f1d18bb62575236ef6e4944980c40e045
https://github.com/onnx/onnx/issues/8036
https://github.com/onnx/onnx/pull/8051
https://nvd.nist.gov/vuln/detail/CVE-2026-14647
https://vuldb.com/cve/CVE-2026-14647
https://vuldb.com/submit/846317
https://vuldb.com/vuln/376160
https://vuldb.com/vuln/376160/cti
https://www.cve.org/CVERecord?id=CVE-2026-14647

History

Wed, 08 Jul 2026 12:15:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2026-14647 https://www.cve.org/CVERecord?id=CVE-2026-14647
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 06 Jul 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 04 Jul 2026 19:15:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Patch name: a7bf3a0f1d18bb62575236ef6e4944980c40e045. It is recommended to apply a patch to fix this issue.
Title		onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
First Time appeared		Onnx Onnx onnx
Weaknesses		CWE-119 CWE-125
CPEs		cpe:2.3:a:onnx:onnx::::::::
Vendors & Products		Onnx Onnx onnx
References		https://github.com/onnx/onnx/ https://github.com/onnx/onnx/commit/a7bf3a0f1d18bb62575236ef6e4944980c40e045 https://github.com/onnx/onnx/issues/8036 https://github.com/onnx/onnx/pull/8051 https://vuldb.com/cve/CVE-2026-14647 https://vuldb.com/submit/846317 https://vuldb.com/vuln/376160 https://vuldb.com/vuln/376160/cti
Metrics		cvssV2_0 `{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C'}` cvssV3_0 `{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}` cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Onnx Onnx

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-07-04T19:00:11.367Z

Updated: 2026-07-06T18:44:46.173Z

Reserved: 2026-07-03T18:29:28.371Z

Link: CVE-2026-14647

Vulnrichment

Updated: 2026-07-06T18:44:37.639Z

NVD

No data.

Redhat

Severity : Moderate

Publid Date: 2026-07-04T19:00:11Z

Links: CVE-2026-14647 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-24T10:00:04Z

Weaknesses

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125
Out-of-bounds Read

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object