YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
MFV — Apache Avro C Library Enum Index OOB
Target format: Avro – Apache (C library, lang/c)
Vulnerability: Unvalidated enum index in value-read.c:336 → uninitialized pointer dereference
Class: CWE-125 (OOB Read) / CWE-457 (Uninitialized Variable)
Files
avro_poc.py: Python generator for malicious Avro datum (enum index = INT32_MAX)avro_enum_oob_harness.c: C harness to decode and trigger crash via avro_datum_to_json
Trigger
python3 avro_poc.py # generates evil_enum.avro
avrocat evil_enum.avro # SEGV
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support