Home/Notebook/c-plus-plus

c-plus-plus

2 notes from the notebook.

All notebook topics

Signed-to-Unsigned Tensor Offset Wraparound in stable-diffusion.cpp

How a signed 32-bit storage_offset in a PyTorch ZIP archive sign-extended to 64-bit unsigned arithmetic, wrapped offset + nbytes past the bounds check in stable-diffusion.cpp (CVE-2026-115571 / GHSA-cfhc-rw9j-rp26), and how sibling arithmetic and duplicate-key bugs surfaced across SafeTensors, GGUF, and imatrix loaders (CVE-2026-70659).

ml-securityformatscruciblec-plus-plusggufsafetensors

The Illusion of Safe Tensors: Why Valid Model Files Still Need Numerical Checks

SafeTensors guarantees that deserializing a model file cannot execute pickle code. It does not guarantee that the numbers inside are safe for the C++ and CUDA kernels that consume them.

securitysafetensorsmodel-supply-chainc-plus-plussecant