CVE-2026-81334: Out-of-bounds Read in hank-ai darknet

The darknet software from hank-ai allocates an array of layers sized exactly to the number declared in the configuration file. However, certain configuration sections (shortcut, scale_channels, sam, and route) supply indices from the file that are used without bounds checking. Specifically, parse_shortcut_section reads net.layers[index].outputs without verifying the index, causing an out-of-bounds read. Subsequently, the create_network dispatch loop writes past the allocation at a location controlled by the crafted file, writing a fixed one-byte value. This vulnerability can be triggered by parsing a malicious configuration file alone, before any weights file is loaded, resulting in a reliable crash and memory corruption.

An attacker who can supply a crafted configuration file can cause the darknet software to crash reliably and write a fixed byte beyond the allocated layer array. This out-of-bounds read and write may lead to denial of service or potentially memory corruption. The write location is controlled by the attacker, though the written value is fixed. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using untrusted configuration files with darknet versions up to 6.0.