| license: mit | |
| tags: | |
| - security | |
| - poc | |
| - executorch | |
| # Harmless ExecuTorch BundledProgram inputs-arity OOB PoC | |
| Public gated PoC for Huntr MFV. Triggers ASan heap-buffer-overflow in | |
| `load_bundled_input` (`bundled_program.cpp:285`) when `.bpte` test-case | |
| `inputs` length is shorter than the embedded method input arity. | |
| Pin: `8077bb60bd1eefed17006e7911b92d32041772b6` | |
| Artifact: `inputs_short.bpte` (empty bundled inputs + embedded sample PTE). | |
| Do not use outside authorized security testing. | |