Downloads · 30 days
0
mfv-avro-c-enum-oob
wulonchia/mfv-avro-c-enum-oob
mfv-avro-c-enum-oob is a machine learning model from wulonchia. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Target format: Avro – Apache (C library, lang/c) Vulnerability: Unvalidated enum index in value-read.c:336 → uninitialized pointer dereference Class: CWE-125 (OOB Read) / CWE-457 (Uninitialized Variable)
Access
Public
Updated Jul 5, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.py2.4 KB · 40%
At a glance
- Access
- Public
- Created
- Jul 5, 2026
- Updated
- Jul 5, 2026
- SHA
- aae64bbe
Model card
From the Hugging Face model README
MFV — Apache Avro C Library Enum Index OOB
Target format: Avro – Apache (C library, lang/c)
Vulnerability: Unvalidated enum index in value-read.c:336 → uninitialized pointer dereference
Class: CWE-125 (OOB Read) / CWE-457 (Uninitialized Variable)
Files
avro_poc.py: Python generator for malicious Avro datum (enum index = INT32_MAX)avro_enum_oob_harness.c: C harness to decode and trigger crash via avro_datum_to_json
Trigger
python3 avro_poc.py # generates evil_enum.avro
avrocat evil_enum.avro # SEGV
- Created
- Jul 5, 2026
- Updated
- Jul 5, 2026