Description
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Khronos Group nnef
Default version status: unaffected
0 to ≤ 1.0.10affected
pkg:pypi/nnefKhronos Group nnef-tools
Default version status: unaffected
0 to ≤ 1.0.11affected
pkg:pypi/nnef-toolsReferences
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe ↗
- https://github.com/KhronosGroup/NNEF-Tools/blob/0bb9c04fcf69c19e0aefa1ba9bf65f05478c8f81/nnef-pyproject/nnef/__init__.py#L87 ↗
- https://github.com/KhronosGroup/NNEF-Tools ↗
- https://www.vulncheck.com/advisories/khronos-nnef-tools-nnef-through-1.0.10-and-nnef-tools-through-1.0.11-path-traversal-via-variable-label ↗