Isn't an adversarial security engineer just a regular QA guy for your model?
An application expecting a number between 10 and 20 and receiving a number larger than an integer causing an error isn't a new issue.