Upstream Security Disclosure GHSA-cr23-59mg-h2rc (Accepted into Draft & Maintainer Fix PR #1595: Negative Decode Length Infinite Loop & OOB Read in Calendar_Write_Property)
Upstream Security Remediation for GHSA-6hh9-gpj4-cr69 (Merged Fix PR #168 in master: Missing IDX_DS_ADAPTIVE_TRIGGERS Sentinel in packetTypesGen3..7 in src/ControlStream.c, CWE-125/CWE-908)
Two out-of-bounds reads in PyTorch TorchScript archive loading (torch.jit.load): unchecked source-range text index and storage size vs record size. Unpatched; upstream scopes TorchScript out.
onnx Einsum shape inference: out-of-bounds read when ellipsis operands differ in rank (SIGSEGV via infer_shapes / check_model). Fixed in onnx 1.23.0.
Samsung ONE luci Circle importer: uint64 overflow in the extended-Buffer bounds check gives a controlled heap out-of-bounds read on model load. Unpatched in 1.30.1; upstream frozen.
Out-of-bounds read in the hank-ai/darknet .cfg parser: [route] layers= and [shortcut] from= index net.layers[] without a lower bound. Unpatched at master and v6.0.
To associate your repository with the cwe-125 topic, visit your repo's landing page and select "manage topics."