GitHub Repos· Oct 28, 2026· by s1ko

s1ko/darknet-cfg-layer-index-oob

Open Original Article ↗
Out-of-bounds read in the hank-ai/darknet .cfg parser: [route] layers= and [shortcut] from= index net.layers[] without a lower bound. Unpatched at master and v6.0.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#cwe-125#cwe-129#darknet#hank-ai#memory-safety#security#vulnerability-research#yolo