Downloads · 30 days
0
modelscan-pytorch-bin-magic-skip-poc
celvexgroup/modelscan-pytorch-bin-magic-skip-poc
modelscan-pytorch-bin-magic-skip-poc is a machine learning model from celvexgroup. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
Access
Public
Updated Jul 19, 2026
Repo size
1.1 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 36%
At a glance
- Access
- Public
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026
- SHA
- a28117c5
Model card
From the Hugging Face model README
PoC - modelscan skips raw pickle in .bin/.pt members as 'Invalid magic number' (BL-0117)
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
- Scanner: modelscan==0.8.8 (picklescanner.py). Format: DL4J (.zip) / any bundle with a .bin/.pt/.pth/.ckpt member.
modelscan -p dl4j_bypass.zip-> 'No issues found', exit 0: a raw unsafe-op pickle carried in a PyTorch-extension member (DL4J'scoefficients.bin) is skipped by scan_pytorch as 'Invalid magic number' and never opcode-scanned.dl4j_control.zip(byte-identical, member renamedcoefficients.pkl) -> CRITICAL exit 1 (positive control). standalone_payload.bin vs .pkl show the same split.- Load-side kicker: real
torch.load('standalone_payload.bin', weights_only=False)raises 'Invalid magic number' BUT the payload already executed during the pre-check pickle load (CWE-436): the same magic-check modelscan uses to SKIP, torch uses to execute-then-reject. - Root cause: picklescanner.py:254-266 scan_pytorch returns Skipped on magic mismatch; settings.py:82 maps .bin/.pt/.pth/.ckpt to PYTORCH only; the pickle scanner never runs on those extensions. HONEST: shares the scan_pytorch function with BL-0042/0083 (magic-PASSES branch) - this is the distinct magic-FAILS skip branch; huntr may apply a dedup haircut.
Files: dl4j_bypass.zip (bypass), dl4j_control.zip (fires), standalone_payload.bin/.pkl. Full report in huntr submission.
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026