Downloads · 30 days
0
flax-orbax-dtype-injection-poc
ryansecuritytest-fanpierlabs/flax-orbax-dtype-injection-poc
flax-orbax-dtype-injection-poc is a machine learning model from ryansecuritytest-fanpierlabs. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
dtypefromname() in both Flax and orbax passes untrusted dtype names from msgpack checkpoint data directly to np.dtype() without validation.
Access
Public
Updated Apr 3, 2026
Repo size
72 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 57%
At a glance
- Access
- Public
- Created
- Apr 3, 2026
- Updated
- Apr 3, 2026
- SHA
- ef683329
Model card
From the Hugging Face model README
Flax/orbax Dtype Injection PoC
Vulnerability
_dtype_from_name() in both Flax and orbax passes untrusted dtype names
from msgpack checkpoint data directly to np.dtype() without validation.
Reproduction
python poc_dtype_injection.py
# Output: BUG TRIGGERED: cannot create an OBJECT array from memory buffer
Impact
DoS via crash when loading malicious Flax/orbax checkpoints.
- Created
- Apr 3, 2026
- Updated
- Apr 3, 2026