Downloads · 30 days
0
poc-pytorch-numel-msvc
0xiviel/poc-pytorch-numel-msvc
poc-pytorch-numel-msvc is a machine learning model from 0xiviel. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Vulnerability: c10/core/TensorImpl.h:2596-2604 — computenumel() uses the unsafe multiplyintegers() path on MSVC builds because C10HASBUILTINOVERFLOW() is unconditionally 0 on MSVC (safenumerics.h:9-10). This disables…
Access
Public
Updated Feb 13, 2026
Repo size
2.4 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py11.2 KB · 55%
At a glance
- Access
- Public
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026
- SHA
- df24f6d2
Model card
From the Hugging Face model README
PoC: compute_numel() Integer Overflow on MSVC (Windows) Builds
Vulnerability: c10/core/TensorImpl.h:2596-2604 — compute_numel() uses the unsafe multiply_integers() path on MSVC builds because C10_HAS_BUILTIN_OVERFLOW() is unconditionally 0 on MSVC (safe_numerics.h:9-10). This disables overflow detection for all Windows PyTorch users.
Files
poc_numel_msvc_overflow.py— Full PoC (crafted model + UBSan-confirmed overflow)test_msvc_overflow.cpp— Standalone C++ UBSan testnumel_overflow_model.pt— Crafted model with overflow dimensions
Quick Start
pip install torch
python poc_numel_msvc_overflow.py
Expected Output
- GCC/Clang:
safe_compute_numel()catches overflow (RuntimeError) - MSVC path:
multiply_integers()silently overflows (UBSan confirmed)
- Created
- Feb 13, 2026
- Updated
- Feb 13, 2026