The vulnerability report describes three independent OOB access sites. The current fix only addresses one of them. See comments.

Design issue: validation at inference time vs. construction time
The current fix validates at inference time (inside ComputeImpl), incurring overhead on every inference call. Since rho_, coefficients_, proba_, and probb_ are model attributes (immutable after construction), all validation should happen in the constructor instead. This:

• Catches malformed models at load time (fail-fast)
• Eliminates per-inference overhead
• Is the standard pattern used elsewhere in ORT

      float val1 = sigmoid_probability(classifier_scores[index], proba_[index], probb_[index]);

index iterates from 0 to num_classifiers - 1.
If proba_ or probb_ are non-empty but have fewer than num_classifiers entries, this is an OOB heap read.
There is no validation at all for these arrays. #Resolved

Refers to: onnxruntime/core/providers/cpu/ml/svmclassifier.cc:327 in 74f0639. [](commit_id = 74f0639, deletion_comment = True)