Integer overflow in TFLite

A specially crafted machine learning model can cause an integer overflow in TensorFlow Lite's embedding lookup operations, potentially leading to unauthorized memory access. This vulnerability allows attackers to read or write data outside the intended heap memory boundaries.

Integer overflow in embedding_size and lookup_size calculations within TFLite's embedding lookup operations results from insufficient input validation on user-supplied parameters. Exploitation requires crafting a malicious TFLite model; successful overflow can lead to heap out-of-bounds read/write, enabling information disclosure or code execution depending on memory layout and application context.