tflite
Datasets
All datasets matching “tflite”poc-openvino-tflite-sparse-oob
PoC: OpenVINO TFLite Sparse Tensor OOB Write (SIGSEGV + SIGABRT)
Summary
A malicious TFLite model with crafted sparse tensor metadata triggers an out-of-bounds write via unchecked indices in the sparsity decompression code, causing SIGSEGV or SIGABRT.
Confirmed on OpenVINO 2025.4.1 — crash on model load.
Root Cause
sparsity_info.cpp:43 — sparse tensor indices from the TFLite flatbuffer are used to write into the dense output buffer without any bounds checking.… See the full description on the dataset page: https://huggingface.co/datasets/0xiviel/poc-openvino-tflite-sparse-oob.poc-segv-in-tflite-infoleak-id000044sig11src000816time958510
SEGV in tflite-infoleak (id:000044,sig:11,src:000816,time:958510,execs:432517,op:havoc,rep:8)
Severity: medium
CWE: CWE-119
Target: tflite-infoleak
Generated: 2026-02-27
Summary
SEGV in tflite-infoleak (id:000044,sig:11,src:000816,time:958510,execs:432517,op:havoc,rep:8). See ASAN output below for details.
Reproduction
chmod +x reproduce.sh
./reproduce.sh
Or manually:
# Build target with ASAN
# Run: <target> poc.tflite
PoC File
poc.tflite (21… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-tflite-infoleak-id000044sig11src000816time958510.poc-segv-in-tflite-xnnpack-id001123sig11src018490time4853092
SEGV in tflite-xnnpack (id:001123,sig:11,src:018490,time:48530929,execs:165036936,op:havoc,rep:1)
Severity: medium
CWE: CWE-119
Target: tflite-xnnpack
Generated: 2026-02-23
Summary
SEGV in tflite-xnnpack (id:001123,sig:11,src:018490,time:48530929,execs:165036936,op:havoc,rep:1). See ASAN output below for details.
Reproduction
chmod +x reproduce.sh
./reproduce.sh
Or manually:
# Build target with ASAN
# Run: <target> poc.tflite
PoC File
poc.tflite… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-tflite-xnnpack-id001123sig11src018490time4853092.poc-segv-in-tflite-invoke-id002621sig11src038003time36218342
SEGV in tflite-invoke (id:002621,sig:11,src:038003,time:362183429,execs:865175237,op:havoc,rep:2)
Severity: medium
CWE: CWE-119
Target: tflite-invoke
Generated: 2026-02-27
Summary
SEGV in tflite-invoke (id:002621,sig:11,src:038003,time:362183429,execs:865175237,op:havoc,rep:2). See ASAN output below for details.
Reproduction
chmod +x reproduce.sh
./reproduce.sh
Or manually:
# Build target with ASAN
# Run: <target> poc.tflite
PoC File
poc.tflite… See the full description on the dataset page: https://huggingface.co/datasets/Rammadaeus/poc-segv-in-tflite-invoke-id002621sig11src038003time36218342.gemma4-tflite-encoderstflite-buffer-offset-overflow-poc
TFLite Buffer.offset uint64 Integer Overflow → OOB Read PoC
Target: TensorFlow Lite (Google)Vulnerability: interpreter_builder.cc:671 — unchecked uint64_t additionImpact: Out-of-bounds read; confirmed OOB pointer dereference (4 bytes before mmap base)Bounty: Huntr Model Format Vulnerability Program
Files
evil_buffer_offset_overflow.tflite — malicious model triggering the vulnerability
build_poc.py — script to rebuild the PoC
Reproduction
import… See the full description on the dataset page: https://huggingface.co/datasets/wulonchia/tflite-buffer-offset-overflow-poc.