| # Model-File-Vulnerability PoCs | |
| Crafted malicious model files that reproduce parser memory-safety bugs, for coordinated disclosure via huntr. | |
| | File | Target format / parser | Bug | | |
| |------|------------------------|-----| | |
| | `mal_yolo_anchors.cfg` | Darknet (`.cfg`) | heap-buffer-overflow WRITE via unbounded `anchors=` copy in `make_yolo_layer` | | |
| | `mal_scalechannels_from.cfg` | Darknet (`.cfg`) | OOB read of `net.layers[]` via unvalidated `[scale_channels] from=` index | | |
| | `poc_malicious_model.zip` | DL4J (`coefficients.bin`) | native OOB via unvalidated tensor strides in nd4j | | |
| | `mal_weight.bin` | Core ML (`.mlpackage` weight blob) | int-overflow bounds-bypass OOB read in MILBlob `Span::Slice` | | |
| Each file triggers a crash/OOB when loaded by the reference parser (ASAN-confirmed). Security research only. | |