GitHub Repos· Oct 28, 2026· by s1ko

s1ko/onnx-tensorrt-int4-oob-write

Open Original Article ↗
Heap out-of-bounds write in onnx-tensorrt WeightsContext::convertPackedInt32Data via INT4/FP4 initializer (shape vs int32_data size). Fixed in release/11.0-GA.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#cwe-787#memory-safety#onnx#onnx-tensorrt#security#tensorrt#vulnerability-research