You can deploy this model and start earning money today!

Rammadaeus/
tflite-gathernd-int-overflow-oob-write

Views

No views yet

TFLite GatherNd Integer Overflow → Heap OOB WRITE

Crafted .tflite model that triggers a heap-buffer-overflow WRITE via signed int32 overflow in the TFLite GatherNd kernel.

Target: tensorflow 2.20.0 CWE: CWE-190 (Integer Overflow) → CWE-122 (Heap Buffer Overflow) Crash site: reference_ops.h:621 in GatherNd<bool, short>() Trigger: invoke()

Reproduction

pip install tensorflow==2.20.0 numpy python3 -c " import numpy as np, tensorflow as tf interp =… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/tflite-gathernd-int-overflow-oob-write.