luckilytsh's picture
Add executorch_qnn_blob ASan PoC
c92dde4 verified
|
Raw
History Blame Contribute Delete
296 Bytes
---
license: mit
tags: [security, poc]
---
# Harmless PoC: ExecuTorch QNN custom-protocol deserialize heap OOB at load
DeserializeContextCustomBuffer(void*) has no length; init ignores processed->size().
Pin: `8077bb60bd1eefed17006e7911b92d32041772b6`
Harmless crash PoC only. No ACE payload.