CVE-2024-7776

critical · 9.1

A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.

9.1

CVSS

1.5%

EPSS (exploit prob.)

73rd

EPSS percentile

2025-03-20

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
onnx	onnx	<= 1.16.1

Check a specific version with /api/v1/cve/match.

References

https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63
https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-7776