Downloads · 30 days
0
poc-pytorch-jit-numel
0xiviel/poc-pytorch-jit-numel
poc-pytorch-jit-numel is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability: torch/csrc/jit/serialization/unpickler.cpp:583 — numel dtype.itemsize() integer overflow causes undersized storage allocation, leading to heap OOB read/write when loading a crafted TorchScript model.
Access
Public
Updated Feb 13, 2026
Repo size
2.4 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py13.8 KB · 75%
At a glance
- Access
- Public
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026
- SHA
- 64463a74
Model card
From the Hugging Face model README
PoC: JIT Unpickler numel×itemsize Integer Overflow → Heap Buffer Overflow
Vulnerability: torch/csrc/jit/serialization/unpickler.cpp:583 — numel * dtype.itemsize() integer overflow causes undersized storage allocation, leading to heap OOB read/write when loading a crafted TorchScript model.
Files
poc_jit_numel_overflow.py— Full PoC (creates crafted model, demonstrates OOB read + write crash)overflow_model.pt— Pre-built crafted TorchScript model
Quick Start
pip install torch
python poc_jit_numel_overflow.py
Expected Output
- Heap OOB Read: 16,380 bytes leaked beyond 4-byte buffer
- Heap OOB Write:
w.fill_(0)crashes with SIGSEGV (heap corruption)
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026