Downloads · 30 days
0
darknet-cfg-weights-parser-poc-DO-NOT-USE
drogba771/darknet-cfg-weights-parser-poc-DO-NOT-USE
darknet-cfg-weights-parser-poc-DO-NOT-USE is a machine learning model from drogba771. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
⚠️ WARNING: SECURITY RESEARCH — PROOF OF CONCEPT ONLY
Access
Public
Updated Jul 19, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.weights19 KB · 64%
At a glance
- Access
- Public
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026
- SHA
- 4f9712e0
Model card
From the Hugging Face model README
⚠️ WARNING: SECURITY RESEARCH — PROOF OF CONCEPT ONLY
This repository contains malformed/crafted Darknet .cfg (and where relevant, .weights) files that trigger crashes in AlexeyAB/darknet's configuration and weight-loading parser. These are passive data files, not executable code — they do nothing on their own and only cause a crash when parsed by parse_network_cfg_custom() / load_weights().
DO NOT load these files with a production Darknet build outside of an isolated, disposable research environment.
Findings Summary
| File | Finding | CWE | Location |
|---|---|---|---|
utils_fgetl_heap_overflow_poc | Heap buffer overflow | CWE-122 | utils.c:483 |
parser_null_deref_poc | NULL pointer dereference | CWE-476 | parser.c:1824 |
parser_divzero_1162_poc | Division by zero | CWE-369 | parser.c:1162 |
parser_avgcounter_divzero_poc | Division by zero | CWE-369 | parser.c:1751 |
weights_header_intoverflow_poc | Signed integer overflow | CWE-190 | parser.c:2260 |
maxpool_stride_zero_divzero_poc | Division by zero | CWE-369 | maxpool_layer.c:100 |
softmax_groups_zero_divzero_poc | Division by zero | CWE-369 | softmax_layer.c:31 |
network_negindex_oob_poc | Out-of-bounds read | CWE-125 | network.c:686 |
yolo_layer_intoverflow_poc | Signed integer overflow | CWE-190 | yolo_layer.c:31 |
All 9 findings discovered via AFL++ fuzzing with ASan+UBSan against AlexeyAB/darknet commit 59596d7. Full technical report: see report.md.
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026