integer-overflow
GGUF-Integer-Overflow-PoC
PoC: GGUF Integer Overflow Vulnerability
This repository contains a Proof-of-Concept (PoC) model file (gguf_overflow.gguf) demonstrating a critical Integer Overflow vulnerability in standard GGUF parsers (like llama.cpp/ggml).
Vulnerability Details
The GGUF format allows defining tensor dimensions. If a tensor is defined with dimensions that fit within a 64-bit element count but result in a byte size exceeding $2^{64}$ when multiplied by the data type size (e.g., Float32… See the full description on the dataset page: https://huggingface.co/datasets/CandyCaine/GGUF-Integer-Overflow-PoC.solidity-vuln-expert-integer-overflow-underflowcaffe-integer-overflow-poc
Caffe Integer Overflow PoC
Proof-of-concept files for multiple signed integer overflow vulnerabilities in BVLC/caffe.
Files
File
Description
dilation_overflow_dos.prototxt
Crafted model: dilation=1073741824 triggers signed overflow → DoS crash
silent_overflow_bypass.prototxt
Crafted model: dilation=1073741824, kernel=5 silently bypasses all CHECKs
pad_overflow_pooling.prototxt
Crafted model: pad=1073741824 triggers pooling layer overflow… See the full description on the dataset page: https://huggingface.co/datasets/wulonchia/caffe-integer-overflow-poc.cntk-integer-overflow-poc
CNTK v2 Integer Overflow PoC
Proof-of-Concept demonstrating multiple integer overflow vulnerabilities in Microsoft CNTK v2 (Cognitive Toolkit) model loading.
Vulnerabilities
NDShape::TotalSize() Unsigned Integer Overflow → Heap Buffer Overflow
Signed Integer Overflow in ConvolveGeometry → Undefined Behavior
ONNX Import Path → Same TotalSize() Overflow
Files
cntk-poc.cpp — Standalone PoC demonstrating all three overflow vectors
Build & Run
clang++… See the full description on the dataset page: https://huggingface.co/datasets/wulonchia/cntk-integer-overflow-poc.
