Downloads · 30 days
0
orc-liborc-timestamp-printer-stack-oob-poc
moon-o/orc-liborc-timestamp-printer-stack-oob-poc
orc-liborc-timestamp-printer-stack-oob-poc is a machine learning model from moon-o. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
huntr Model File Vulnerability PoC. Loading pocorcAtimestampprinterstackoob.orc with liborc's shipped orc-contents (built with -fsanitize=address) triggers a stack-buffer-overflow READ at c++/src/ColumnPrinter.cc:205…
Access
Public
Updated Jul 13, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.orc30.9 KB · 93%
At a glance
- Access
- Public
- Created
- Jul 13, 2026
- Updated
- Jul 13, 2026
- SHA
- d1a94967
Model card
From the Hugging Face model README
Apache ORC (liborc) stack-buffer-overflow PoC (timestamp printer)
huntr Model File Vulnerability PoC. Loading poc_orc_A_timestamp_printer_stack_oob.orc with liborc's shipped orc-contents (built with -fsanitize=address) triggers a stack-buffer-overflow READ at c++/src/ColumnPrinter.cc:205 (orc::writeString, via TimestampColumnPrinter::printRow): a file-controlled out-of-range timestamp year makes strftime return 0, leaving timeBuffer[20] non-NUL-terminated, so strlen reads past it. Reproduce:
orc-contents poc_orc_A_timestamp_printer_stack_oob.orc
For security research / responsible disclosure only.
- Created
- Jul 13, 2026
- Updated
- Jul 13, 2026