Hugging Face's logo

cyberwawa
/
circle-unverified-flatbuf-poc

Model card Files
xet
 Community

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

Samsung Circle Format — Missing FlatBuffer Verification PoC

Bug

onert-micro runtime calls circle::GetModel() WITHOUT VerifyModelBuffer(). Three code paths skip verification:

  • OMCircleReader.cpp:64
  • ModuleLoader.cpp:27
  • onert-micro.cpp:238

Crafted .circle files with invalid FlatBuffer offsets cause arbitrary OOB memory access.

Files

  • unverified_model.circle — Invalid root table offset (0x7FFFFFFF)
  • truncation_attack.circle — Negative vtable offset causing OOB

Also: int size truncation

BaseLoader.h:218: int size = file_stat.st_size truncates files > 2GB, bypassing FlatBuffer verification for content past 2GB boundary.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support