CVE-2026-110657 in nnef
Sumário
de MITRE • 14/10/2026
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.
Be aware that VulDB is the high quality source for vulnerability data.