YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
PoC: NetCDF-C read_hdf5_att() N*fixed_size Integer Overflow β Heap Overflow (CWE-122)
Summary
libsrc4/hdf5open.c:1925:
contig_buf = malloc((size_t)att->len * fixed_size * sizeof(char));
On 32-bit builds: N = 65537, fixed_size = 65537:
65537 * 65537 = 4,295,098,369β wraps to 131,073 (32-bit)malloc(131073)butH5Aread(...)writes 4 GB+ β heap overflow
PoC file
poc5_netcdf_hdf5_fixed_string_overflow.h5 β HDF5 file with fixed-length string attribute.
Inference Providers NEW
This model isn't deployed by any Inference Provider. π Ask for provider support