mfv-poc / README.md
m0rphsec's picture
Add MFV PoC model files (darknet, dl4j, coreml)
b2b37bc
|
Raw
History Blame Contribute Delete
819 Bytes
# Model-File-Vulnerability PoCs
Crafted malicious model files that reproduce parser memory-safety bugs, for coordinated disclosure via huntr.
| File | Target format / parser | Bug |
|------|------------------------|-----|
| `mal_yolo_anchors.cfg` | Darknet (`.cfg`) | heap-buffer-overflow WRITE via unbounded `anchors=` copy in `make_yolo_layer` |
| `mal_scalechannels_from.cfg` | Darknet (`.cfg`) | OOB read of `net.layers[]` via unvalidated `[scale_channels] from=` index |
| `poc_malicious_model.zip` | DL4J (`coefficients.bin`) | native OOB via unvalidated tensor strides in nd4j |
| `mal_weight.bin` | Core ML (`.mlpackage` weight blob) | int-overflow bounds-bypass OOB read in MILBlob `Span::Slice` |
Each file triggers a crash/OOB when loaded by the reference parser (ASAN-confirmed). Security research only.