---
tags:
  - vulnerability-poc
  - ace
  - tensorrt
---
# Vulnerability Disclosure: Critical ACE in TensorRT Parser

## Vulnerability
Arbitrary Code Execution (ACE) via malformed TensorRT engine header.

## Description
The TensorRT engine parser fails to validate the size prefix for internal data structures, leading to a heap-based buffer overflow when processing a maliciously crafted engine file.

## Proof of Concept
The provided `poc_trt.engine` triggers a memory corruption event during the deserialization phase.

## Steps to Reproduce
1. Attempt to load the model using `tensorrt` library.
2. Observe segmentation fault or memory corruption.

## Recommendation
Implement rigorous size validation for all engine header segments.