Downloads · 30 days
0
poc-pytorch-flatbuf-dict
0xiviel/poc-pytorch-flatbuf-dict
poc-pytorch-flatbuf-dict is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability: flatbufferloader.cpp:594 — parseDict() loops over keys-size() entries and reads values-Get(i) without checking i < values-size() or that values is non-null. A crafted .ptl file can trigger SIGSEGV (null…
Access
Public
Updated Feb 13, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py17.7 KB · 88%
At a glance
- Access
- Public
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026
- SHA
- 9e14192e
Model card
From the Hugging Face model README
PoC: Dict Keys/Values OOB in PyTorch Mobile Flatbuffer Loader
Vulnerability: flatbuffer_loader.cpp:594 — parseDict() loops over keys->size() entries and reads values->Get(i) without checking i < values->size() or that values is non-null. A crafted .ptl file can trigger SIGSEGV (null values pointer), OOB read (size mismatch), or type confusion (OOB values point to wrong-type IValues).
Files
poc_flatbuf_dict_oob.py— Full PoC with 3 attack variants + code analysis
Quick Start
pip install torch
python poc_flatbuf_dict_oob.py
Expected Output
- Part 1: Valid model loads correctly (baseline)
- Part 2: SIGSEGV crash from null values pointer dereference
- Part 3: OOB read detected (0xDEADBEEF used as IValue index)
- Part 4: Silent type confusion — Dict[str, int] contains String values
- Part 5: Vulnerable code analysis and suggested fix
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026