0xiviel/poc-openvino-string-tensor-oob

PoC: OpenVINO String Constant Heap OOB Read (SIGSEGV) Summary A malicious OpenVINO IR model (.xml + .bin) with a string-type Constant node containing crafted negative offsets in the packed string tensor format triggers a heap out-of-bounds read, causing SIGSEGV (exit code 139). Confirmed on OpenVINO 2025.4.1 — immediate crash on model load. Root Cause string_aligned_buffer.cpp:37 — packed string tensors store begin_ids and end_ids arrays as int32_t… See the full description on the dataset page: https://huggingface.co/datasets/0xiviel/poc-openvino-string-tensor-oob.