| --- |
| tags: |
| - security |
| - proof-of-concept |
| - vulnerability-disclosure |
| --- |
| |
| # Arm NN deserializer stack buffer overflow proof-of-concept (CWE-787) |
|
|
| This repository contains a single proof-of-concept file, `poc.armnn` (296 bytes), used for coordinated disclosure of a stack-based buffer overflow in the Arm NN deserializer (`armnnDeserializer::ToTensorInfo`). It is a security research artifact. Loading the file triggers a memory-safety crash during deserialization. It performs no code execution and has no effect other than crashing the process that loads it. |
|
|
| ## File |
|
|
| - `poc.armnn`: a serialized Arm NN graph (`armnnSerializer` flatbuffers schema) with a single `InputLayer` whose output tensor declares a `dimensionSpecificity` vector of length 64. The deserializer copies that vector into a fixed 5-element stack array (`bool[armnn::MaxNumOfTensorDimensions]`) without a bounds check. |
|
|
| ## Trigger |
|
|
| Loading the file through the public deserializer API crashes: |
|
|
| ```cpp |
| auto d = armnnDeserializer::IDeserializer::Create(); |
| d->CreateNetworkFromBinary(bytes_of_poc_armnn); // stack-buffer-overflow in ToTensorInfo |
| ``` |
|
|
| Under AddressSanitizer this reports a `stack-buffer-overflow` WRITE in `armnnDeserializer::ToTensorInfo` (`Deserializer.cpp:756`), reached from `CreateNetworkFromBinary -> CreateNetworkFromGraph -> SetupInputLayers -> ToTensorInfo`. The file is a structurally valid flatbuffers buffer and passes the deserializer's Verifier. |
|
|
| ## Scope and safety |
|
|
| This file only crashes the loader. Do not load it with an Arm NN build you depend on. It is intended for controlled reproduction of the vulnerability during disclosure. |
|
|
