Rammadaeus/poc-segv-in-executorch-deep-id000297sig11src000915time117466

Out-of-bounds read in strcmp via crafted .pte operator name Vulnerability ExecuTorch .pte model file that triggers a crash during Program::load_method(). CWE: CWE-476 (NULL Pointer Dereference) / CWE-125 (Out-of-bounds Read) Tested on: ExecuTorch commit a17428b Reproduction git clone https://github.com/pytorch/executorch cd executorch && git checkout a17428b git submodule update --init mkdir cmake-out && cd cmake-out cmake ..… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-executorch-deep-id000297sig11src000915time117466.