Khronos CVEs and Security Vulnerabilities

CVE-2026-110657

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Khronos

Products

Nnef Nnef-tools

CVE-2023-4969

GPU kernel implementations susceptible to memory leak

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Amd Imaginationtech Khronos

Products

Athlon 3000g Athlon 3000g Firmware Instinct Mi100 and 258 more

Search vulnerabilities

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label

GPU kernel implementations susceptible to memory leak