TFLite wrapped-offset crash PoC

• target format: TFLite (.tflite) – Google
• attacker-controlled artifact: a crafted .tflite model file
• trusted action: loading the model with the default LiteRT/TFLite interpreter
• verified effect: native process crash (SIGSEGV) in the default Interpreter(model_path=...) path

Files

• no_signatures.bin: TensorFlow's legitimate sample .tflite model used as the clean baseline
• repro_tflite_offset_underflow.py: builds the malicious .tflite from a legitimate TensorFlow sample model and verifies the crash in fresh processes

Reproduction

• baseline model succeeds repeatedly
• malicious wrapped-offset model crashes with nonzero exit codes