CVE Intelligence

Khronos Group vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Khronos Group products: 1 record(s), with severity, exploitation and fixes.

Nnef 1Nnef-tools 1

Exploited only (KEV) →

CVE-2026-110657 Low · 3.3 CWE-22 Oct 14, 2026
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.