Downloads · 30 days
0
poc-pytorch-jit-binunicode
0xiviel/poc-pytorch-jit-binunicode
poc-pytorch-jit-binunicode is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability: unpickler.cpp:344 reads BINUNICODE8 length as int64t (signed) instead of uint64t. The implicit conversion to sizet in readBytes() causes 32-bit truncation on ARM mobile (pickle desync → corruption) and…
Access
Public
Updated Feb 13, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py13.6 KB · 78%
At a glance
- Access
- Public
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026
- SHA
- 7f61860c
Model card
From the Hugging Face model README
PoC: BINUNICODE8 Signed/Unsigned Length Confusion in JIT Unpickler
Vulnerability: unpickler.cpp:344 reads BINUNICODE8 length as int64_t (signed) instead of uint64_t. The implicit conversion to size_t in readBytes() causes 32-bit truncation on ARM mobile (pickle desync → corruption) and DoS on 64-bit (excessive allocation).
Files
poc_binunicode8_overflow.py— Full PoC with code analysis, 64-bit DoS demo, 32-bit truncation testtest_truncation.cpp— Standalone C++ 32-bit truncation demonstration
Quick Start
pip install torch
python poc_binunicode8_overflow.py
Expected Output
- Part 1: Code analysis showing int64_t vs uint64_t mismatch
- Part 2: 64-bit DoS (MemoryError, end of archive, max_size rejection)
- Part 3: 32-bit truncation table (C++ test)
- Part 4: Pickle stream desync analysis on 32-bit ARM
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026