Malicious ONNX Engine PoC (ASAN Heap-Buffer-Overflow)
WARNING: DO NOT LOAD THIS MODEL IN A PRODUCTION ENVIRONMENT.
This repository contains a maliciously crafted .onnx file designed strictly for security research and vulnerability disclosure via Huntr.
Vulnerability Details
Loading this .onnx file via onnxruntime::Graph::Resolve triggers a heap-buffer-overflow due to an integer overflow during tensor shape allocation.
Usage (Proof of Concept)
To reproduce the crash safely, run this model inside an isolated Docker container containing an AddressSanitizer-instrumented build of the ONNX Runtime parser.
This model was generated mathematically using OSS-Fuzz-Gen to bypass static protobuf header validation.
