CVE catalog
CVE-2026-42627
In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and trigger a heap-based b
- Severity
- Medium · CVSS 6.2
- Source
- [NVD] · [CVE record]
- EPSS
- 0.13% · Oct 25, 2026
In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and trigger a heap-based buffer over-read during model optimization. The overflow occurs when multiplying tensor dimensions using 32-bit unsigned arithmetic without overflow detection, causing GetNumBytes() to return an understated allocation size. During Optimize()->InferOutputShapes(), the BatchToSpaceNdLayer reads beyond the allocated buffer.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | armnn | sid | 23.08-6 | vulnerable |
| Debian | armnn | forky | 23.08-6 | vulnerable |
| Debian | armnn | trixie | 23.08-5 | vulnerable |
| Debian | armnn | bookworm | 20.08-12 | vulnerable |
| Cpe | armnn | Not reported | Not reported | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | armnn | source | sid | (unfixed) | unimportant | Not reported | [1140104] |
| Debian | armnn | source | forky | (unfixed) | unimportant | Not reported | [1140104] |
| Debian | armnn | source | trixie | (unfixed) | unimportant | Not reported | [1140104] |
| Debian | armnn | source | bookworm | (unfixed) | unimportant | Not reported | [1140104] |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.