parseExternalWeights() in WeightsContext.cpp uses offset/length from
the ONNX protobuf without bounds checking against the mmap'd file size.
Offset 999999999 on a 16-byte file → read past mmap boundary → crash.tensorrt_oob_read.onnx — Model with malicious external data offsetweights.bin — Small weights file (16 bytes)poc.py — Reproduction script