{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "fixed": "0.21.16"
              },
              {
                "introduced": "0.22.0"
              },
              {
                "fixed": "0.22.2"
              },
              {
                "introduced": "0.23.0"
              },
              {
                "fixed": "0.23.1"
              }
            ],
            "source": [
              "AFFECTED_FIELD",
              "REFERENCES"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "introduced": "2f8f99bc6c22ec44eba810eea49ca9602255408f"
            },
            {
              "introduced": "bf90b4b9ef4099a25217ec0aef3d5b9aa0497e38"
            },
            {
              "fixed": "2b3f2432a92dccbcdd3a6d1f856ab64252e9f5e9"
            },
            {
              "fixed": "19a2c2a748e033ef1924ecfd3981afcb44592c15"
            },
            {
              "fixed": "84b657a4023a45d639b95dcecf4df327c536d186"
            },
            {
              "fixed": "34c7df2c9bd2a36583e09b52f3e6319bf23102e8"
            },
            {
              "fixed": "828ec20f74c14c0923c7d7f0cff062ed222d630a"
            },
            {
              "fixed": "ee5f019d39fb97f7d4431b883c3ce97b74c28a64"
            }
          ],
          "repo": "https://github.com/sonos/tract",
          "type": "GIT"
        }
      ]
    }
  ],
  "aliases": [
    "GHSA-x5mv-8wgw-29hg"
  ],
  "database_specific": {
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
      "CWE-125",
      "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55093.json"
  },
  "details": "Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src/tensors.rs read_tensor for attacker-controlled tensor dimensions, the allocation size, and the reported tensor length. Loading a crafted NNEF archive through model_for_path or model_for_read reaches the default DatLoader and can make the wrapped size check accept a small allocation while data/src/tensor.rs as_slice_unchecked creates a much larger logical slice. Model construction through as_uniform can then read beyond the heap allocation and disclose adjacent data, and later access can terminate the process with a segmentation fault. The affected dense numeric tensor path does not include the independently guarded bool, String, or block-quant paths, and no out-of-bounds write or code execution was demonstrated. This issue is fixed in versions 0.21.16, 0.22.2, and 0.23.1.",
  "id": "CVE-2026-55093",
  "modified": "2026-09-16T03:30:31.973207632Z",
  "published": "2026-09-14T19:47:46.877Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/sonos/tract/releases/tag/0.21.16"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sonos/tract/releases/tag/0.22.2"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sonos/tract/releases/tag/v0.23.1"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55093.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55093"
    },
    {
      "type": "FIX",
      "url": "https://github.com/sonos/tract/commit/34c7df2c9bd2a36583e09b52f3e6319bf23102e8"
    },
    {
      "type": "FIX",
      "url": "https://github.com/sonos/tract/commit/828ec20f74c14c0923c7d7f0cff062ed222d630a"
    },
    {
      "type": "FIX",
      "url": "https://github.com/sonos/tract/commit/ee5f019d39fb97f7d4431b883c3ce97b74c28a64"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load"
}