Sourced from onnxruntime's releases.
ONNX Runtime v1.24.3
This is a patch release for ONNX Runtime 1.24, containing bug fixes, security improvements, performance enhancements, and execution provider updates.
Security Fixes
- Core: Fixed GatherCopyData integer truncation leading to heap out-of-bounds read/write. (#27444)
- Core: Fixed RoiAlign heap out-of-bounds read via unchecked batch_indices. (#27543)
- Core: Prevent heap OOB from maliciously crafted Lora Adapters. (#27518)
- Core: Fixed out-of-bounds access for Resize operation. (#27419)
Bug Fixes
- Core: Fixed GatherND division by zero when batch dimensions mismatch. (#27090)
- Core: Fixed validation for external data paths for models loaded from bytes. (#27430)
- Core: Fixed SkipLayerNorm fusion incorrectly applied when gamma/beta are not 1D. (#27459)
- Core: Fixed double-free in TRT EP custom op domain Release functions. (#27471)
- Core: Fixed QMoE CPU Operator. (#27360)
- Core: Fixed MatmulNBits prepacking scales. (#27412)
- Python: Fixed refcount bug in map input conversion that caused shutdown segfault. (#27413)
- NuGet: Fixed DllImportResolver. (#27397)
- NuGet: Added
OrtEnv.DisableDllImportResolverto prevent fatal error on resolver conflict. (#27535)Performance Improvements
- Core: QMoE CPU performance update (up to 4x on 4-bit). (#27364)
- Core: Fixed O(n²) model load time for TreeEnsemble with categorical feature chains. (#27391)
Execution Provider Updates
- NvTensorRtRtx EP:
- WebGPU:
- MLAS:
- VitisAI EP: Removed
s_kernel_registry_vitisaiep.reset()indeinitialize_vitisai_ep(). (#27295)- Plugin EPs: Added "library_path" metadata entry to
OrtEpDeviceinstances for plugin and provider bridge EPs. (#27522)Build and Infrastructure
- Pipelines:
- Python: Enabled Python 3.14 CI and upgraded dependencies. (#27401)
- Build: Suppressed spurious Array Out of Bounds warnings produced by GCC 14.2 compiler on Linux builds. (#27454)
- Build: Fixed
-Warray-boundsbuild error in MLAS on clang 17+. (#27499)- Telemetry: Added/Updated telemetry events. (#27356)
- Config: Increased
kMaxValueLengthto 8192. (#27521)
... (truncated)
3a728b7
ORT 1.24.3 release cherry pick round 4 (#27558)dd6a854
ORT 1.24.3 release cherry pick round 3 (#27501)15c006b
ORT 1.24.3 release cherry pick round 2 (#27492)ee26608
ORT 1.24.3 release cherry pick round 1 (#27476)058787c
ORT 1.24.2 Release cherry pick round 4 (#27388)6fc7ee3
ORT 1.24.2 release cherry pick round 3 (#27378)9871182
ORT 1.24.2 release cherry-pick round 2 (#27343)f34d11d
ORT 1.24.2 release cherry pick round 1 (#27330)8ba51c7
update version to 1.24.2470ae16
Patch pools to use older agent version on ARM64 (#27232)