---
license: apache-2.0
tags:
- security
- model-file-vulnerability
- dl4j
- deeplearning4j
---

# DL4J ComputationGraph trigger PoC

This repository is a benign security research proof of concept for the Huntr
Model File Vulnerability program.

Files:

- `control-cg.zip`: valid Deeplearning4j `ComputationGraph` model archive.
- `trigger14-cg.zip`: valid Deeplearning4j `ComputationGraph` model archive with
  malicious coefficients.
- `Dl4jComputationGraphTriggerPoC.java`: verifier and local model builder.

Tested trigger:

```text
control-cg.zip:   13.0 -> 13.0, 14.0 -> 14.0, 15.0 -> 15.0
trigger14-cg.zip: 13.0 -> 13.0, 14.0 -> 114.0, 15.0 -> 15.0
```