0xiviel/

poc-openvino-string-tensor-oob

	PoC: OpenVINO String Constant Heap OOB Read (SIGSEGV)




	
	Summary

A malicious OpenVINO IR model (.xml + .bin) with a string-type Constant node containing crafted negative offsets in the packed string tensor format triggers a heap out-of-bounds read, causing SIGSEGV (exit code 139). Confirmed on OpenVINO 2025.4.1 — immediate crash on model load.

string_aligned_buffer.cpp:37 — packed string tensors store begin_ids and end_ids arrays as int32_t offsets.… See the full description on the dataset page: https://huggingface.co/datasets/0xiviel/poc-openvino-string-tensor-oob.