Hugging Face's logo

luckilytsh
/
executorch-backend-delegate-data-vector-oob-poc

ExecuTorch
security
poc
Model card Files
xet
 Community
executorch-backend-delegate-data-vector-oob-poc / README.md
luckilytsh's picture
luckilytsh
Add README.md
abd9a31 verified
preview code
|
Raw
History Blame Contribute Delete
909 Bytes
metadata 
license: mit
tags:
  - security
  - poc
  - executorch

Harmless PoC: ExecuTorch Program::get_backend_delegate_data vector length OOB

Program::get_backend_delegate_data indexes Program.backend_delegate_data[index] using a forged FlatBuffer vector length with no bound against the program buffer. Under default Program::Verification::Minimal, loading a malicious .pte and calling Method::load (FakeBackend INLINE delegate) triggers ASan heap-buffer-overflow READ at program.cpp:547.

Distinct from packaged values/chains/instructions, READY operators/args, READY ExecutionPlan.delegates/compile_specs, READY constant/mutable offsets, MethodMeta sizes, #16704/#19904 null backend_delegate_data, Vela, VGF, Vulkan.

Files

  • poc_backend_delegate_data_asan.cpp, asan.log
  • method_deps_stub.cpp (FakeBackend + Method link stubs)
  • NOTES.md
./poc_backend_delegate_data_asan