ericblackgachara/openvino-poc

OpenVINO — Integer Overflow → Bounds Check Bypass

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Field	Value
Target	openvino (huntr.com — openvinotoolkit/openvino)
Format	OpenVINO IR .xml + .bin
Vuln	CWE-190 → CWE-789 (integer overflow bypasses bounds check)
CVSS	7.5 High
Occurrences	3 (20% bonus each)
Trigger	ov.Core().read_model("evil.xml", "evil.bin") → succeeds; .compile_model() → OOM kill

Quick Repro

python3 poc/make_poc.py    # creates evil.xml + evil.bin
python3 poc/trigger.py     # read_model succeeds; compile_model OOM-kills

Files

• poc/make_poc.py — PoC builder
• poc/trigger.py — crash trigger
• poc/evil.xml + poc/evil.bin — malicious model pair
• report.md — huntr submission
• evidence/poc-run.html — self-contained HTML evidence

Key Source Locations

• Primary: src/core/xml_util/src/xml_deserialize_util.cpp:893–904
• Secondary: same file, lines 819–834 (string branch)
• Tertiary: src/plugins/intel_cpu/src/utils/graph_serializer/deserializer.cpp:284–285