mscgo77/openvino-ir-integer-overflow-poc

⚠️ WARNING — Security Research PoC

DO NOT load this model in production environments. DO NOT use this model for any purpose other than security research.

What is this?

This repository contains a proof-of-concept (PoC) model file created for responsible security vulnerability disclosure via huntr.com.

Vulnerability Type

Integer Overflow (CWE-190)

OpenVINO IR XML model with crafted shape dimensions that cause integer overflow in shape_size() — bypasses size validation.

Important Notes

• —🔴 This model is intentionally crafted to demonstrate a security vulnerability.
• —🔴 Loading this model may cause crashes or memory corruption.
• —🔴 DO NOT load in any production, staging, or shared environment.
• —This PoC exists solely to support a responsible disclosure report.
• —This repository will be removed or made private after the vulnerability review process is complete.

Responsible Disclosure

This PoC is part of a responsible disclosure process through huntr.com. The goal is to help maintainers identify and fix security issues, not to cause harm.

If you have questions about this repository, please contact the author or refer to the associated huntr.com report.