[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5yQasekTZJqIjpiOIwEHRcoFc6TUhIo7POT0K0iGeOY":3,"g5a-risk:CVE-2024-27319":142},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":29,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":61,"references":62,"referencesCount":82,"weaknesses":83,"weaknessesCount":92,"isActivelyExploited":93,"cisaInfo":29,"otxData":29,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":137,"notableEvents":138},"CVE-2024-27319","What is CVE-2024-27319?","Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.","Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by on...","2024-02-23T18:15:50.96","2026-06-17T07:19:38.627",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":41,"CVSSMetricV2":42,"CVSSMetricV40":43},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"6f8de1f0-f67e-45a6-b68f-98777fdb759c","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:L","LOCAL","LOW","NONE","REQUIRED","UNCHANGED",4.4,"MEDIUM",null,1.8,2.5,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":39,"ImpactScore":40},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":36,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":26,"ConfidentialityImpact":37,"IntegrityImpact":24,"AvailabilityImpact":37,"BaseScore":12,"BaseSeverity":38,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NETWORK","HIGH","CRITICAL",3.9,5.2,[],[],[],0.00589,[44,44,44,44,44,44,44],"Critical",[48,53,58],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"linuxfoundation","onnx","*","cpe:2.3:a:linuxfoundation:onnx:*:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"fedoraproject","fedora","39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",3,[63,68,73,76,78,80],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002F08a399ba75a805b7813ab8936b91d0e274b08287","GitHub",[67],"Patch",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFGTBH5ZYL2LGYHIJDHN2MAUURIR5E7PY\u002F","Fedoraproject",[72],"Third Party Advisory",{"url":74,"source":70,"tags":75},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FTFJJID2IZDOLFDMWVYTBDI75ZJQC6JOL\u002F",[72],{"url":64,"source":65,"tags":77},[67],{"url":69,"source":70,"tags":79},[72],{"url":74,"source":70,"tags":81},[72],6,[84],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2024-27319? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-27319, a critical severity cyber security vulnerability from 2024. Versions of the package onnx before and including 1.15....","CVE-2024-27319, CVE-2024-27319 vulnerability, CVE-2024-27319 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, linuxfoundation security, fedoraproject security, onnx vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2024-27319",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-27319","Cybersecurity","CVE-2024-27319, CVE-2024-27319 vulnerability, CVE-2024-27319 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121,129],{"Operator":29,"Negate":29,"Nodes":122},[123],{"Operator":124,"Negate":93,"CPEMatch":125},"OR",[126],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":127,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":128,"VersionEndIncluding":29},"CB5DEE14-818A-4A39-9E14-E22F8E304016","1.16.0",{"Operator":29,"Negate":29,"Nodes":130},[131],{"Operator":124,"Negate":93,"CPEMatch":132},[133,135],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":134,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":136,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"CA277A6C-83EC-4536-9125-97B84C4FAF59",[],[],{"lastModified":11,"cacheTime":140,"version":141},1792436155218,"2.0",{"score":143,"band":144,"action":145,"scoredAt":146},54,"Medium","Plan remediation","2026-10-16T07:00:53.760878+00:00"]