MFV — Circle (Samsung ONE) OOB Read PoC

Target format: Circle – Samsung (Samsung Open Source ONE) Vulnerability: Unchecked tensor->buffer() index in BaseLoader.h:401 Class: CWE-129 → CWE-125 (Out-of-bounds Read)

File

poc_oob_buffer.circle: Minimal Circle model with tensor.buffer = 0xFFFF (65535) while only 1 buffer exists

Trigger

nnfw_run --backend cpu poc_oob_buffer.circle

Expected: crash / SEGV at flatbuffers::Vector::Get(65535) in BaseLoader<LoaderDomain>::loadOperand

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support