openvino-poc

ericblackgachara/openvino-poc

openvino-poc is a machine learning model from ericblackgachara. Use it for the machine learning task on the model card, and read the license before you ship it in a product.

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Downloads · 30 days

Access

Public

Updated May 9, 2026

Repo size

145 KB

Likes

Public

Hugging Face

Repo makeup

Click a slice to open those files.

.pdf145 KB · 95%

At a glance

Access: Public
Created: May 9, 2026
Updated: May 9, 2026
SHA: 37c6ed69

Model card

From the Hugging Face model README

OpenVINO — Integer Overflow → Bounds Check Bypass

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Field	Value
Target	openvino (huntr.com — openvinotoolkit/openvino)
Format	OpenVINO IR `.xml` + `.bin`
Vuln	CWE-190 → CWE-789 (integer overflow bypasses bounds check)
CVSS	7.5 High
Occurrences	3 (20% bonus each)
Trigger	`ov.Core().read_model("evil.xml", "evil.bin")` → succeeds; `.compile_model()` → OOM kill

Quick Repro

python3 poc/make_poc.py    # creates evil.xml + evil.bin
python3 poc/trigger.py     # read_model succeeds; compile_model OOM-kills

Files

poc/make_poc.py — PoC builder
poc/trigger.py — crash trigger
poc/evil.xml + poc/evil.bin — malicious model pair
report.md — huntr submission
evidence/poc-run.html — self-contained HTML evidence

Key Source Locations

Primary: src/core/xml_util/src/xml_deserialize_util.cpp:893–904
Secondary: same file, lines 819–834 (string branch)
Tertiary: src/plugins/intel_cpu/src/utils/graph_serializer/deserializer.cpp:284–285

Created: May 9, 2026
Updated: May 9, 2026