mfv-poc / README.md
m0rphsec's picture
Add MFV PoC model files (darknet, dl4j, coreml)
b2b37bc
|
Raw
History Blame Contribute Delete
819 Bytes

Model-File-Vulnerability PoCs

Crafted malicious model files that reproduce parser memory-safety bugs, for coordinated disclosure via huntr.

File Target format / parser Bug
mal_yolo_anchors.cfg Darknet (.cfg) heap-buffer-overflow WRITE via unbounded anchors= copy in make_yolo_layer
mal_scalechannels_from.cfg Darknet (.cfg) OOB read of net.layers[] via unvalidated [scale_channels] from= index
poc_malicious_model.zip DL4J (coefficients.bin) native OOB via unvalidated tensor strides in nd4j
mal_weight.bin Core ML (.mlpackage weight blob) int-overflow bounds-bypass OOB read in MILBlob Span::Slice

Each file triggers a crash/OOB when loaded by the reference parser (ASAN-confirmed). Security research only.