You can deploy this model and start earning money today!

0xiviel/
poc-pytorch-flatbuf-dict

Name: poc-pytorch-flatbuf-dict
Availability: InStock

Views

No views yet

PoC: Dict Keys/Values OOB in PyTorch Mobile Flatbuffer Loader

Vulnerability: flatbuffer_loader.cpp:594 — parseDict() loops over keys->size() entries and reads values->Get(i) without checking i < values->size() or that values is non-null. A crafted .ptl file can trigger SIGSEGV (null values pointer), OOB read (size mismatch), or type confusion (OOB values point to wrong-type IValues).

Files

poc_flatbuf_dict_oob.py — Full PoC with 3 attack variants + code analysis

Quick Start

bash

pip install torch
python poc_flatbuf_dict_oob.py

Expected Output

Part 1: Valid model loads correctly (baseline)
Part 2: SIGSEGV crash from null values pointer dereference
Part 3: OOB read detected (0xDEADBEEF used as IValue index)
Part 4: Silent type confusion — Dict[str, int] contains String values
Part 5: Vulnerable code analysis and suggested fix

0xiviel/poc-pytorch-flatbuf-dict

PoC: Dict Keys/Values OOB in PyTorch Mobile Flatbuffer Loader

Files

Quick Start

Expected Output

0xiviel/
poc-pytorch-flatbuf-dict