Downloads · 30 days
0
0% of all-time downloads
TFlite-oob-poc
ericblackgachara/TFlite-oob-poc
TFlite-oob-poc is a machine learning model from ericblackgachara. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Status: PoC CONFIRMED ✅ — Ready for huntr submission
All-time downloads
19
Public
Repo size
154 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.pdf153 KB · 88%
At a glance
- Access
- Public
- Created
- May 9, 2026
- Updated
- May 9, 2026
- SHA
- 08fc67a9
Model card
From the Hugging Face model README
TFLite — OOB Read via Crafted String Tensor
Status: PoC CONFIRMED ✅ — Ready for huntr submission
| Field | Value |
|---|---|
| Target | tensorflow-lite (huntr.com — tensorflow/tensorflow) |
| Format | .tflite (FlatBuffers) |
| Vuln | CWE-125 Out-of-Bounds Read |
| CVSS | 8.2 High |
| Trigger | tf.lite.Interpreter("poc.tflite") → invoke() → SIGSEGV |
| Exit code | 139 (repeatable) |
Quick Repro
python3 poc/make_poc.py # creates poc.tflite
python3 poc/trigger.py # crashes with SIGSEGV
echo $? # 139
Files
poc/make_poc.py— PoC builderpoc/trigger.py— crash triggerpoc/poc.tflite— 428-byte malicious modelreport.md— huntr submissionevidence/poc-run.html— self-contained HTML evidence page
Key Source Locations
- Root cause:
tensorflow/compiler/mlir/lite/utils/string_utils.h(GetString, no bounds check) - Sink:
tensorflow/lite/kernels/fill.cc:112(FillString → AddString from OOB ptr) - Load skip:
tensorflow/lite/core/subgraph.cc:1944(string tensors skip BytesRequired check)
- Created
- May 9, 2026
- Updated
- May 9, 2026