ONNX Patches Out-of-Bounds Read in ConvTranspose Shape Inference

ONNX disclosed CVE-2026-115920, a medium-severity out-of-bounds read in ConvTranspose shape inference triggered when a weight tensor has fewer than three dimensions and no kernel_shape attribute is provided¹. A crafted model could pass onnx.checker.check_model() and cause a SIGSEGV crash during onnx.shape_inference.infer_shapes(), enabling denial of service. Pip versions 1.2.1 through 1.21.0 are affected; version 1.22.0 contains the patch. The defect affected both the convTransposeShapeInference_opset11() path and the then-current ConvTranspose inference implementation.