Tract
Monthly
Incorrect buffer size validation in Sonos Tract's ONNX Initializer Loader allows a crafted ONNX model file to crash the inference process. The Tensor::from_raw_dt_align function in data/src/tensor.rs accepts a raw byte slice and declared tensor shape without confirming the slice length matches the expected size, causing a Rust panic in copy_from_slice when dimensions mismatch. Applications using Tract 0.23.0-0.23.4 to load untrusted or third-party ONNX models are at risk; a public proof-of-concept (GitHub issue #2390) confirms reproducibility, though no CISA KEV listing means confirmed threat-actor exploitation has not been observed.
Incorrect buffer size validation in Sonos Tract's ONNX Initializer Loader allows a crafted ONNX model file to crash the inference process. The Tensor::from_raw_dt_align function in data/src/tensor.rs accepts a raw byte slice and declared tensor shape without confirming the slice length matches the expected size, causing a Rust panic in copy_from_slice when dimensions mismatch. Applications using Tract 0.23.0-0.23.4 to load untrusted or third-party ONNX models are at risk; a public proof-of-concept (GitHub issue #2390) confirms reproducibility, though no CISA KEV listing means confirmed threat-actor exploitation has not been observed.