README.md

metadata

tags:
  - security
  - proof-of-concept
  - pytorch
  - torchscript
  - flatbuffer
license: mit

Flatbuffer JIT __setstate__ Load Exec

Defensive validation / triage only.

This PoC shows that a crafted flatbuffer-exported JIT artifact can keep forward behavior benign while running scripted __setstate__ logic during torch.jit.jit_module_from_flatbuffer() before inference.

Files:

• model/clean_setstate.ff: clean control
• model/evil_setstate.ff: crafted flatbuffer artifact
• model/build-meta.json: hashes and generation metadata
• reproduce/replay_flatbuffer_setstate.py: replay script for clean vs crafted flatbuffer load

Quick repro:

python reproduce/replay_flatbuffer_setstate.py \
  --clean model/clean_setstate.ff \
  --crafted model/evil_setstate.ff