You can deploy this model and start earning money today!

wulonchia/
mfv-avro-c-enum-oob

Name: mfv-avro-c-enum-oob
Availability: InStock

Views

No views yet

MFV — Apache Avro C Library Enum Index OOB

Target format: Avro – Apache (C library, lang/c) Vulnerability: Unvalidated enum index in value-read.c:336 → uninitialized pointer dereference Class: CWE-125 (OOB Read) / CWE-457 (Uninitialized Variable)

Files

avro_poc.py: Python generator for malicious Avro datum (enum index = INT32_MAX)
avro_enum_oob_harness.c: C harness to decode and trigger crash via avro_datum_to_json

Trigger

bash

python3 avro_poc.py  # generates evil_enum.avro
avrocat evil_enum.avro  # SEGV

wulonchia/mfv-avro-c-enum-oob

MFV — Apache Avro C Library Enum Index OOB

Files

Trigger

wulonchia/
mfv-avro-c-enum-oob