Talson/mfv-caffe-intoverflow-memcorrupt-poc

Caffe (.caffemodel) Integer Overflow PoC CWE-190/CWE-122: TileLayer int overflow -> heap-overflow WRITE + im2col stack-overflow WRITE Bug 1: TileLayer (headline) tiles=1073741825 with shape(axis)=4: product overflows int32 to 4. Reshape allocates 16 bytes. Forward_cpu iterates 1073741825 times writing past the buffer. Attacker controls overflow content via weights. Bug 2: im2col pad_h=1073741823: 2*pad_h overflows int32. Output dimension computation… See the full description on the dataset page: https://huggingface.co/datasets/Talson/mfv-caffe-intoverflow-memcorrupt-poc.