mscgo77/openvino-string-tensor-oob-poc
By mscgo77 · ↓ 0 · ♥ 0 · Updated 2026-03-13
What's in this repo
This page lists the files in mscgo77/openvino-string-tensor-oob-poc, including malicious_string_oob.onnx.
- 1 ONNX models (.onnx files)
- 4 files, including 1 .md, 1 .onnx, 1 .py
- Last updated 2026-03-13
ONNX files
| File | Size | Download |
|---|---|---|
| malicious_string_oob.onnx | — | Download |
How to use
These ONNX files can be loaded with ONNX Runtime. To inspect a model graph, upload the file to the Netron viewer. Download links point to the original files on Hugging Face.
README
⚠️ WARNING — Security Research PoC
DO NOT load this model in production environments. DO NOT use this model for any purpose other than security research.
What is this?
This repository contains a proof-of-concept (PoC) model file created for responsible security vulnerability disclosure via huntr.com.
Vulnerability Type
Out-of-Bounds Read (CWE-125)
ONNX model with string tensor initializer where dims >> string_data count — triggers out-of-bounds memory read during inference.
Important Notes
- 🔴 This model is intentionally crafted to demonstrate a security vulnerability.
- 🔴 Loading this model may cause crashes or out-of-bounds memory access.
- 🔴 DO NOT load in any production, staging, or shared environment.
- This PoC exists solely to support a responsible disclosure report.
- This repository will be removed or made private after the vulnerability review process is complete.
Responsible Disclosure
This PoC is part of a responsible disclosure process through huntr.com. The goal is to help maintainers identify and fix security issues, not to cause harm.
If you have questions about this repository, please contact the author or refer to the associated huntr.com report.
Files (4)
Related models
More from mscgo77
More models
No task type declared.