YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Model-File-Vulnerability PoCs
Crafted malicious model files that reproduce parser memory-safety bugs, for coordinated disclosure via huntr.
| File | Target format / parser | Bug |
|---|---|---|
mal_yolo_anchors.cfg |
Darknet (.cfg) |
heap-buffer-overflow WRITE via unbounded anchors= copy in make_yolo_layer |
mal_scalechannels_from.cfg |
Darknet (.cfg) |
OOB read of net.layers[] via unvalidated [scale_channels] from= index |
poc_malicious_model.zip |
DL4J (coefficients.bin) |
native OOB via unvalidated tensor strides in nd4j |
mal_weight.bin |
Core ML (.mlpackage weight blob) |
int-overflow bounds-bypass OOB read in MILBlob Span::Slice |
Each file triggers a crash/OOB when loaded by the reference parser (ASAN-confirmed). Security research only.
- Downloads last month
- -
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support