File size: 435 Bytes
d79ce4a 15fe861 d79ce4a 15fe861 | 1 2 3 4 5 6 7 8 9 10 11 12 | # VULN-013: DOUBLE OOB Read in TensorRT ONNX Parser
**CWE-125: Out-of-bounds Read** in DOUBLE weight handling.
Two trigger paths:
1. **raw_data** (primary): DOUBLE [10000] with 8B raw_data. 10/10 crash rate.
2. **double_data**: DOUBLE [5000] with 1 element. 5/5 crash rate.
DOUBLE-specific: FLOAT/INT32/INT64/FLOAT16 at same config = PARSE_FAIL (safe).
Tested: TensorRT 10.15.1.29. Crash: ACCESS_VIOLATION (0xC0000005).
|