tocsin

CVE-2026-55093

2 advisories.

crates.io/tract-nnef CVE-2026-55093: medium 6.1

tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load

Action: Upgrade tract-nnef to 0.21.16 or later.

cargo update -p tract-nnef --precise 0.23.1
cargo update -p tract-nnef --precise 0.22.2
cargo update -p tract-nnef --precise 0.21.16

Affected

introducedfixedlast affected
0.23.00.23.1-
0.22.00.22.2-
00.21.16-

Fixed versions

0.23.10.22.20.21.16

Sources

CVE-2026-55093 · published · modified · JSON

crates.io/tract-nnef CVE-2026-55093: medium 6.1

Integer overflow in tract-nnef NNEF tensor parser leads to out-of-bounds read on model load

Action: Upgrade tract-nnef to 0.21.16 or later.

cargo update -p tract-nnef --precise 0.21.16
cargo update -p tract-nnef --precise 0.22.2
cargo update -p tract-nnef --precise 0.23.1

Affected

introducedfixedlast affected
0.0.0-00.21.16-
0.22.00.22.2-
0.23.00.23.1-

Fixed versions

0.21.160.22.20.23.1

Sources

CVE-2026-55093 · published · modified · JSON