Downloads · 30 days
0
poc-pytorch-jit-rebuild
0xiviel/poc-pytorch-jit-rebuild
poc-pytorch-jit-rebuild is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability: torch/csrc/jit/serialization/unpickler.cpp:979-982 — rebuildTensor() uses unsafeGetTensorImpl() to set storageoffset and sizes/strides from attacker-controlled pickle data without validating they fit wi…
Access
Public
Updated Feb 13, 2026
Repo size
4.8 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py13.4 KB · 65%
At a glance
- Access
- Public
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026
- SHA
- 78e5fa0d
Model card
From the Hugging Face model README
PoC: rebuildTensor Missing Storage Bounds Check → Heap OOB Read/Write
Vulnerability: torch/csrc/jit/serialization/unpickler.cpp:979-982 — rebuildTensor() uses unsafeGetTensorImpl() to set storage_offset and sizes/strides from attacker-controlled pickle data without validating they fit within the storage allocation.
Files
poc_jit_rebuild_oob.py— Full PoC (creates crafted models, demonstrates OOB read + SIGSEGV crash)oob_read_model.pt— Crafted model with offset=1000 (heap data leak)oob_write_model.pt— Crafted model with offset=268435456 (SIGSEGV crash)
Quick Start
pip install torch
python poc_jit_rebuild_oob.py
Expected Output
- Heap OOB Read: leaks heap data from byte 4000 of 32-byte storage
- SIGSEGV crash on both read and write at large offset
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026