CVE-2026-81334

Name of the Vulnerable Software and Affected Versions darknet (affected versions not specified)

Description An out-of-bounds read and write occurs when the software subscripts its layer array using an index from a configuration file without verifying it against the array length. The array is allocated in src-lib/darknet network.cpp based on the number of layer sections declared. Specifically, the from field in shortcut, scale channels, and sam sections, and the layers field in the route section, provide indices that are used in parse shortcut section within src-lib/darknet cfg.cpp to read net.layers[index].outputs without bounds checking. Subsequently, the dispatch loop in create network uses the same index to assign values to net.layers[l.index].use bin output and net.layers[l.index].keep delta gpu, resulting in a write operation past the allocation. Processing a specially crafted configuration file can lead to a reliable system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.