All vulnerabilities
CVE-2026-116104

Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

Sony Neural Network Libraries
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Text from CVE List

Affected versions 30

  • Neural Network Librariesaffected: 1.0CVE List
  • Neural Network Librariesaffected: 1.1CVE List
  • Neural Network Librariesaffected: 1.2CVE List
  • Neural Network Librariesaffected: 1.3CVE List
  • Neural Network Librariesaffected: 1.4CVE List
  • Neural Network Librariesaffected: 1.5CVE List
  • Neural Network Librariesaffected: 1.6CVE List
  • Neural Network Librariesaffected: 1.7CVE List
  • Neural Network Librariesaffected: 1.8CVE List
  • Neural Network Librariesaffected: 1.9CVE List
  • Neural Network Librariesaffected: 1.10CVE List
  • Neural Network Librariesaffected: 1.11CVE List
  • Neural Network Librariesaffected: 1.12CVE List
  • Neural Network Librariesaffected: 1.13CVE List
  • Neural Network Librariesaffected: 1.14CVE List
  • Neural Network Librariesaffected: 1.15CVE List
  • Neural Network Librariesaffected: 1.16CVE List
  • Neural Network Librariesaffected: 1.17CVE List
  • Neural Network Librariesaffected: 1.18CVE List
  • Neural Network Librariesaffected: 1.19CVE List
  • Neural Network Librariesaffected: 1.20CVE List
  • Neural Network Librariesaffected: 1.21CVE List
  • Neural Network Librariesaffected: 1.22CVE List
  • Neural Network Librariesaffected: 1.23CVE List
  • Neural Network Librariesaffected: 1.24CVE List
  • Neural Network Librariesaffected: 1.25CVE List
  • Neural Network Librariesaffected: 1.26CVE List
  • Neural Network Librariesaffected: 1.27CVE List
  • Neural Network Librariesaffected: 1.28CVE List
  • Neural Network Librariesaffected: 1.29CVE List

References 5