YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

TensorRT ONNX Parser Heap Overflow PoC (CWE-122)

Vulnerability

ownWeights() in WeightsContext.cpp allocates by tensor shape but copies by raw data size. A model with shape=[1] (4 bytes) and 4000 bytes of raw data causes a 3996-byte heap overflow.

Reproduce

import tensorrt as trt
parser = trt.OnnxParser(network, logger)
parser.parse_from_file("tensorrt_heap_overflow.onnx")
# heap overflow in ownWeights
Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support