CVE-2024-27318: PYSEC-2024-222 - Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor prot

CVE-2024-27318 · Severity: low · CVSS 3.1 · Published 2024-02-23

Technologies: onnx (PyPI). Vendors: PyPI.

Executive brief

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.

Affected products

PyPI onnx

Related threats

ONNX TOCTOU race condition in save_external_data
ONNX save_external_data symlink-following file write
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_convert
ONNX null pointer dereference in version_converter
ONNX TOCTOU arbitrary file write in save_external_data