CVE-2024-27319

Publication date

2024-02-23 17:39:52

Family

HiddenLayer

State

PUBLISHED

Description

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.