You can deploy this model and start earning money today!

rickymorty/
flax-deserialization-poc

Name: flax-deserialization-poc
Availability: InStock

Views

No views yet

Flax Checkpoint Deserialization Vulnerability PoC

Vulnerability

Flax's _ndarray_from_bytes() in flax/serialization.py accepts arbitrary dtype names from untrusted msgpack data during checkpoint deserialization, despite blocking dangerous dtypes during serialization.

Files

poc1_structured_dtype.flax — Structured dtype (f4,f4) accepted during LOAD but blocked during SAVE
poc2_void_dtype.flax — Void dtype (V1) with mismatched buffer/shape
poc3_dos_shape.flax — Enormous shape causing DoS via memory exhaustion
poc4_string_dtype.flax — Fixed-string dtype (|S256) accepted during LOAD
create_malicious_checkpoint.py — Script to generate PoC files
exploit_loader.py — Script demonstrating the vulnerability

Reproduction

bash

pip install flax msgpack
python exploit_loader.py

rickymorty/flax-deserialization-poc

Flax Checkpoint Deserialization Vulnerability PoC

Vulnerability

Files

Reproduction

rickymorty/
flax-deserialization-poc