CVE-2026-116104Medium· 6.3▾ SunlitA security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
neural_network_libraries 1.0neural_network_libraries 1.1neural_network_libraries 1.2neural_network_libraries 1.3neural_network_libraries 1.4neural_network_libraries 1.5neural_network_libraries 1.6neural_network_libraries 1.7neural_network_libraries 1.8neural_network_libraries 1.9neural_network_libraries 1.10neural_network_libraries 1.11neural_network_libraries 1.12neural_network_libraries 1.13neural_network_libraries 1.14neural_network_libraries 1.15neural_network_libraries 1.16neural_network_libraries 1.17neural_network_libraries 1.18neural_network_libraries 1.19neural_network_libraries 1.20neural_network_libraries 1.21neural_network_libraries 1.22neural_network_libraries 1.23neural_network_libraries 1.24neural_network_libraries 1.25neural_network_libraries 1.26neural_network_libraries 1.27neural_network_libraries 1.28neural_network_libraries 1.29neural_network_libraries 1.30neural_network_libraries 1.31neural_network_libraries 1.32neural_network_libraries 1.33neural_network_libraries 1.34neural_network_libraries 1.35neural_network_libraries 1.36neural_network_libraries 1.37neural_network_libraries 1.38neural_network_libraries 1.39.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116103Medium· 6.3Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection
CVE-2025-10097Medium· 6.3A vulnerability was identified in SimStudioAI sim up to 1.0.0
CVE-2023-29383Low· 3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)
CVE-2023-27533High· 8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation
CVE-2022-0391High· 7.5A flaw was found in Python, specifically within the urllib.parse module
CVE-2020-8177High· 7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.