Rammadaeus/poc-segv-in-executorch-deep-id000272sig11src000696time604336

Misaligned memory access in tensor FQN parsing via crafted .pte external tensor Vulnerability ExecuTorch .pte model file that triggers a crash during Program::load_method(). CWE: CWE-476 (NULL Pointer Dereference) / CWE-125 (Out-of-bounds Read) Tested on: ExecuTorch commit a17428b Reproduction git clone https://github.com/pytorch/executorch cd executorch && git checkout a17428b git submodule update --init mkdir cmake-out && cd cmake-out cmake ..… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-executorch-deep-id000272sig11src000696time604336.