Downloads · 30 days
3
15% of all-time downloads
tflite-1
fiajoiwfj/tflite-1
tflite-1 is a machine learning model from fiajoiwfj. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This package contains a benign local PoC for a TensorFlow Lite model-file loader crash. A valid Keras-converted .tflite control file loads normally through tf.lite.Interpreter. A one-byte mutation at offset 118 in the…
All-time downloads
20
Public
Repo size
2 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.txt15.9 KB · 45%
At a glance
- Access
- Public
- Created
- Jun 22, 2026
- Updated
- Jun 22, 2026
- SHA
- 2be77798
Model card
From the Hugging Face model README
TFLite SignatureDef/TensorMap parser SIGSEGV
This package contains a benign local PoC for a TensorFlow Lite model-file
loader crash. A valid Keras-converted .tflite control file loads normally
through tf.lite.Interpreter. A one-byte mutation at offset 118 in the
serialized SignatureDef/TensorMap region causes the normal interpreter
constructor to terminate with SIGSEGV.
Reproduce
Run from the repository root:
reproduce.py
Expected success tokens:
MFV_TFLITE_CONTROL_OK
MFV_TFLITE_SIGSEGV_CONFIRMED
MFV_REPRO_OK_MFV-50
Artifacts
artifacts/control_seed.tflite: valid control model.artifacts/crash_signature_tensor_map.tflite: derived by changing byte 118 from0x00to0x83.evidence/loader-results.json: package-local loader verification.evidence/gdb-backtrace.txt: native crash backtrace.evidence/scanner-tflite.json: ModelScan/PickleScan evidence.
The PoC has no shell, network, credential, persistence, or destructive behavior. The only effect of the crash case is process termination in a child loader subprocess.
- Created
- Jun 22, 2026
- Updated
- Jun 22, 2026