CVE-2026-75093

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-75093", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-17T16:39:53.532Z", "datePublished": "2026-08-18T01:30:12.910Z", "dateUpdated": "2026-08-19T14:11:38.099Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-18T01:30:12.910Z"}, "title": "sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-131", "lang": "en", "description": "Incorrect Calculation of Buffer Size"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "Buffer Overflow"}]}], "affected": [{"vendor": "sonos", "product": "tract", "versions": [{"version": "0.23.0", "status": "affected"}, {"version": "0.23.1", "status": "affected"}, {"version": "0.23.2", "status": "affected"}, {"version": "0.23.3", "status": "affected"}, {"version": "0.23.4", "status": "affected"}], "cpes": ["cpe:2.3:a:sonos:tract:*:*:*:*:*:*:*:*"], "modules": ["ONNX Initializer Loader"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 66b10bda8895f4bfaf8c205361f0125cdf51f99b. It is best practice to apply a patch to resolve this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-08-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-17T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-17T18:44:58.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "m00dy (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/391335", "name": "VDB-391335 | sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/391335/cti", "name": "VDB-391335 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-75093", "name": "CVE-2026-75093 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/877271", "name": "Submit #877271 | Sonos (sonos/tract) tract main @ 2b68fb8 (release line 0.21.x) Denial of Service", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sonos/tract/issues/2390", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sonos/tract/pull/2413", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/sonos/tract/commit/66b10bda8895f4bfaf8c205361f0125cdf51f99b", "tags": ["patch"]}, {"url": "https://github.com/sonos/tract/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-19T14:11:28.628389Z", "id": "CVE-2026-75093", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-19T14:11:38.099Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-75093", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-17T16:39:53.532Z", "datePublished": "2026-08-18T01:30:12.910Z", "dateUpdated": "2026-08-19T14:11:38.099Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-18T01:30:12.910Z"}, "title": "sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-131", "lang": "en", "description": "Incorrect Calculation of Buffer Size"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "Buffer Overflow"}]}], "affected": [{"vendor": "sonos", "product": "tract", "versions": [{"version": "0.23.0", "status": "affected"}, {"version": "0.23.1", "status": "affected"}, {"version": "0.23.2", "status": "affected"}, {"version": "0.23.3", "status": "affected"}, {"version": "0.23.4", "status": "affected"}], "cpes": ["cpe:2.3:a:sonos:tract:*:*:*:*:*:*:*:*"], "modules": ["ONNX Initializer Loader"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 66b10bda8895f4bfaf8c205361f0125cdf51f99b. It is best practice to apply a patch to resolve this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-08-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-17T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-17T18:44:58.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "m00dy (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/391335", "name": "VDB-391335 | sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/391335/cti", "name": "VDB-391335 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-75093", "name": "CVE-2026-75093 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/877271", "name": "Submit #877271 | Sonos (sonos/tract) tract main @ 2b68fb8 (release line 0.21.x) Denial of Service", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sonos/tract/issues/2390", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sonos/tract/pull/2413", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/sonos/tract/commit/66b10bda8895f4bfaf8c205361f0125cdf51f99b", "tags": ["patch"]}, {"url": "https://github.com/sonos/tract/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-75093", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-19T14:11:28.628389Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-19T14:11:33.532Z"}}]}}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:sonos:tract:*:*:*:*:*:*:*:*"], "modules": ["ONNX Initializer Loader"], "product": "tract", "vendor": "sonos", "versions": [{"status": "affected", "version": "0.23.0"}, {"status": "affected", "version": "0.23.1"}, {"status": "affected", "version": "0.23.2"}, {"status": "affected", "version": "0.23.3"}, {"status": "affected", "version": "0.23.4"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 66b10bda8895f4bfaf8c205361f0125cdf51f99b. It is best practice to apply a patch to resolve this issue."}, {"lang": "es", "value": "Una vulnerabilidad de seguridad ha sido detectada en sonos tract hasta 0.23.4. Esto afecta a la funci\u00f3n Tensor::from_raw_dt_align del archivo data/src/tensor.rs del componente ONNX Initializer Loader. Dicha manipulaci\u00f3n conduce a un c\u00e1lculo incorrecto del tama\u00f1o del b\u00fafer. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. El nombre del parche es 66b10bda8895f4bfaf8c205361f0125cdf51f99b. Es una buena pr\u00e1ctica aplicar un parche para resolver este problema."}], "id": "CVE-2026-75093", "lastModified": "2026-10-22T22:10:00.250", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75093", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-19T14:11:28.628389Z", "version": "2.0.3"}}]}, "published": "2026-08-18T02:17:30.540", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/sonos/tract/"}, {"source": "cna@vuldb.com", "url": "https://github.com/sonos/tract/commit/66b10bda8895f4bfaf8c205361f0125cdf51f99b"}, {"source": "cna@vuldb.com", "url": "https://github.com/sonos/tract/issues/2390"}, {"source": "cna@vuldb.com", "url": "https://github.com/sonos/tract/pull/2413"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-75093"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/877271"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/391335"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/391335/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}, {"lang": "en", "value": "CWE-131"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.23.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.23.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.23.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.23.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.23.4"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "tract", "source": "cna", "vendor": "sonos"}, "product": "tract", "vendor": "sonos"}], "created": "2026-08-18T03:00:09.651416+00:00", "updated": "2026-08-21T12:39:23.786676+00:00", "vendors": ["sonos", "sonos$PRODUCT$tract"]}