Upload README.md with huggingface_hub
Browse files
README.md
ADDED
|
@@ -0,0 +1,24 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
---
|
| 2 |
+
license: apache-2.0
|
| 3 |
+
tags:
|
| 4 |
+
- security-research
|
| 5 |
+
- messagepack
|
| 6 |
+
- msgspec
|
| 7 |
+
- model-file-vulnerability
|
| 8 |
+
- huntr-mfv
|
| 9 |
+
---
|
| 10 |
+
|
| 11 |
+
# MessagePack msgspec Decoder untyped trigger PoC
|
| 12 |
+
|
| 13 |
+
This repository contains a benign security research proof of concept for a
|
| 14 |
+
MessagePack model-file vulnerability report.
|
| 15 |
+
|
| 16 |
+
Files:
|
| 17 |
+
|
| 18 |
+
- `control.msgpack`
|
| 19 |
+
- `decoder_trigger.msgpack`
|
| 20 |
+
- `reproduce.py`
|
| 21 |
+
|
| 22 |
+
The malicious MessagePack file is loaded with
|
| 23 |
+
`msgspec.msgpack.Decoder().decode(...)`. It behaves like the control file on
|
| 24 |
+
nearby probes but flips the exact trigger vector `[4, 2, 7]`.
|