File size: 556 Bytes
89ab622
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
---
license: apache-2.0
tags:
- security-research
- messagepack
- msgspec
- model-file-vulnerability
- huntr-mfv
---

# MessagePack msgspec Decoder trigger PoC

This repository contains a benign security research proof of concept for a
MessagePack model-file vulnerability report.

Files:

- `control.msgpack`
- `decoder_trigger.msgpack`
- `reproduce.py`

The malicious MessagePack file is loaded with
`msgspec.msgpack.Decoder(type=ModelState).decode(...)`. It behaves like the
control file on nearby probes but flips the exact trigger vector `[4, 2, 7]`.