Downloads · 30 days
0
tflite-flatsize-overflow-poc
AgentRen/tflite-flatsize-overflow-poc
tflite-flatsize-overflow-poc is a machine learning model from AgentRen. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Security Research — Vulnerability Proof of Concept
Access
Public
Updated Feb 2, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 50%
At a glance
- Access
- Public
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026
- SHA
- abf117d0
Model card
From the Hugging Face model README
TFLite FlatSize() Integer Overflow PoC
Security Research — Vulnerability Proof of Concept
Vulnerability: Integer Overflow in RuntimeShape::FlatSize() (CWE-190 → CWE-122)
TFLite's RuntimeShape::FlatSize() multiplies all tensor dimensions into a 32-bit int
with ZERO overflow checking. The result feeds directly into memcpy size parameters in 30+
operator implementations, enabling heap buffer overflow.
Files
poc_generator.py— Script to generate malicious .tflite filesREADME.md— This file
Impact
Heap buffer overflow when loading and running inference on a malicious .tflite model.
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026