You can deploy this model and start earning money today!

AgentRen/
tflite-flatsize-overflow-poc

Name: tflite-flatsize-overflow-poc
Availability: InStock

Views

No views yet

TFLite FlatSize() Integer Overflow PoC

Security Research — Vulnerability Proof of Concept

Vulnerability: Integer Overflow in RuntimeShape::FlatSize() (CWE-190 → CWE-122)

TFLite's RuntimeShape::FlatSize() multiplies all tensor dimensions into a 32-bit int with ZERO overflow checking. The result feeds directly into memcpy size parameters in 30+ operator implementations, enabling heap buffer overflow.

Files

poc_generator.py — Script to generate malicious .tflite files
README.md — This file

Impact

Heap buffer overflow when loading and running inference on a malicious .tflite model.

AgentRen/tflite-flatsize-overflow-poc

TFLite FlatSize() Integer Overflow PoC

Vulnerability: Integer Overflow in RuntimeShape::FlatSize() (CWE-190 → CWE-122)

Files

Impact

AgentRen/
tflite-flatsize-overflow-poc