AIKIDO-2026-10289

TL;DR

Affected versions of this package contain an out-of-bounds read vulnerability in ONNX Runtime’s ArrayFeatureExtractor operator due to missing validation for negative index values. The implementation checks only the upper bound (<= stride) but fails to ensure the index is non-negative, allowing crafted inputs such as y_data = [-10] to access memory outside the intended array. An attacker able to supply or influence model inputs could exploit this flaw to read unintended heap memory regions during inference, potentially leaking sensitive data from the process memory.