YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Darknet Parser Vulnerability PoC
This repository contains proof-of-concept files demonstrating memory-safety vulnerabilities in pjreddie/darknet's C parser.
Files
shortcut_segfault.cfg- Triggers SIGSEGV via NULL dereference (VULN-01)poc1.cfg+poc1_big.weights- Triggers integer overflow โ undersized allocation (VULN-02)
Reproduction
git clone https://github.com/pjreddie/darknet
cd darknet && make
./darknet classify shortcut_segfault.cfg poc1_big.weights data/dog.jpg
# โ SIGSEGV
Vulnerabilities
- NULL pointer dereference:
strchr(a, ',')+1when comma missing โ atoi(NULL) โ SIGSEGV - Integer overflow:
c/groups*n*size*sizeoverflows 32-bit int โ tiny calloc โ heap overflow when loading weights
License
These PoC files are provided for security research purposes only.
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support