Rammadaeus/poc-segv-in-executorch-deep-id000283sig11src000883time211931

NULL pointer write in Method::parse_values via crafted .pte tensor list Vulnerability ExecuTorch .pte model file that triggers a crash during Program::load_method(). CWE: CWE-476 (NULL Pointer Dereference) / CWE-125 (Out-of-bounds Read) Tested on: ExecuTorch commit a17428b Reproduction git clone https://github.com/pytorch/executorch cd executorch && git checkout a17428b git submodule update --init mkdir cmake-out && cd cmake-out cmake ..… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-executorch-deep-id000283sig11src000883time211931.