{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"AI model Claude Opus 4.6 odhalil v\u00edce ne\u017e 500 dosud nezn\u00e1m\u00fdch zranitelnost\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Anthropic ozn\u00e1mila roz\u0161\u00ed\u0159en\u00ed AI modelu Claude Opus 4.6 o mo\u017enosti vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du a sd\u00edlela v\u00fdsledky experimentu, b\u011bhem n\u011bho\u017e bylo identifikov\u00e1no v\u00edce ne\u017e 500 dosud nezn\u00e1m\u00fdch (0-day) zranitelnost\u00ed v posledn\u00edch verz\u00edch r\u016fzn\u00fdch otev\u0159en\u00fdch projekt\u016f. Pr\u00e1ce se zam\u011b\u0159ila na vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed zp\u016fsoben\u00fdch probl\u00e9my s pam\u011bt\u00ed, proto\u017ee jejich p\u0159\u00edtomnost je snaz\u0161\u00ed ov\u011b\u0159it. V\u0161em identifikovan\u00fdm zranitelnostem byl p\u0159i\u0159azen vysok\u00fd stupe\u0148 nebezpe\u010d\u00ed. Ka\u017ed\u00e1 zranitelnost byla manu\u00e1ln\u011b ov\u011b\u0159ena a potvrzena zam\u011bstnanci spole\u010dnosti Anthropic nebo extern\u00edmi bezpe\u010dnostn\u00edmi odborn\u00edky. <\/p>\n

Pro anal\u00fdzu zranitelnost\u00ed byly vyu\u017eity k\u00f3dov\u00e9 z\u00e1kladny popul\u00e1rn\u00edch otev\u0159en\u00fdch projekt\u016f, kter\u00e9 ji\u017e del\u0161\u00ed dobu proch\u00e1zej\u00ed nep\u0159etr\u017eit\u00fdm fuzzingov\u00fdm testov\u00e1n\u00edm v slu\u017eb\u011b OSS-Fuzz. Na rozd\u00edl od fuzzingov\u00e9ho testov\u00e1n\u00ed, p\u0159i n\u011bm\u017e se generuje proud r\u016fzn\u00fdch n\u00e1hodn\u00fdch kombinac\u00ed vstupn\u00edch dat, se AI model sna\u017eil analyzovat k\u00f3d zohledn\u011bn\u00edm p\u0159edchoz\u00edch oprav za \u00fa\u010delem identifikace podobn\u00fdch nevy\u0159e\u0161en\u00fdch chyb, identifikoval problematick\u00e9 vzory a logicky vyvodil, jak\u00e1 vstupn\u00ed data mohou naru\u0161it pr\u016fb\u011bh vykon\u00e1v\u00e1n\u00ed. <\/p>\n

Informace o zranitelnostech identifikovan\u00fdch b\u011bhem experimentu ji\u017e za\u010dala b\u00fdt zas\u00edl\u00e1na spr\u00e1vc\u016fm, se kter\u00fdmi prob\u00edh\u00e1 spolupr\u00e1ce na p\u0159ijet\u00ed oprav. Aby se spr\u00e1vc\u016fm pomohlo b\u011bhem proveden\u00e9 kontroly, byly manu\u00e1ln\u011b vyvinuty z\u00e1platy pro opravu identifikovan\u00fdch probl\u00e9m\u016f. Jako p\u0159\u00edklad byly uvedeny t\u0159i zranitelnosti v GhostScript, OpenSC a CGIF, kter\u00e9 byly v dob\u011b publikace odstran\u011bny spr\u00e1vci. <\/p>\n

Konfigurace pou\u017e\u00edt\u00e1 k identifikaci probl\u00e9m\u016f se neshodovala s tradi\u010dn\u00edmi syst\u00e9my automatick\u00e9ho vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed \u2014 model Claude Opus 4.6 m\u011bl p\u0159\u00edstup k virtu\u00e1ln\u00edm stroji<\/a>, ve kter\u00e9 byly krom\u011b zkouman\u00e9ho k\u00f3du nainstalov\u00e1ny standardn\u00ed n\u00e1stroje pro v\u00fdvoj\u00e1\u0159e (coreutils, Python atd.) a utility pro lad\u011bn\u00ed a anal\u00fdzu zranitelnost\u00ed (v\u010detn\u011b n\u00e1stroj\u016f pro fuzzingov\u00e9 testov\u00e1n\u00ed). Modelu nebyly d\u00e1ny jasn\u00e9 pokyny k pou\u017e\u00edv\u00e1n\u00ed t\u011bchto n\u00e1stroj\u016f a nebyly poskytnuty specifick\u00e9 informace o metod\u00e1ch vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed. Modelu byla pouze polo\u017eena \u00faloha a poskytnuta p\u0159\u00edle\u017eitost samostatn\u011b uva\u017eovat o optim\u00e1ln\u00edm vyu\u017eit\u00ed dostupn\u00fdch n\u00e1stroj\u016f. <\/p>\n

P\u0159i hled\u00e1n\u00ed zranitelnost\u00ed v GhostScript se AI model na za\u010d\u00e1tku pokusil o fuzzing testov\u00e1n\u00ed, ale kdy\u017e to nep\u0159ineslo v\u00fdsledky, p\u0159e\u0161el k anal\u00fdze k\u00f3du. Anal\u00fdza k\u00f3du tak\u00e9 nevedla k v\u00fdsledk\u016fm, a tak se model za\u010dal zab\u00fdvat histori\u00ed zm\u011bn v gitu a v jednom z commit\u016f si v\u0161iml zm\u00ednky o kontrole hranic bufferu. Po rozboru commitu model ur\u010dil, \u017ee oprava obsahovala chyb\u011bj\u00edc\u00ed kontrolu hranic bufferu p\u0159i zpracov\u00e1n\u00ed p\u00edsem. <\/p>\n

Pot\u00e9 model ur\u010dil k\u00f3d, kter\u00fd byl p\u0159ed opravou, a pokusil se naj\u00edt v ostatn\u00edm k\u00f3du podobn\u00e9 vzory pou\u017e\u00edv\u00e1n\u00ed problematick\u00e9 funkce, kter\u00e9 z\u016fstaly neopravovan\u00e9. V kone\u010dn\u00e9m d\u016fsledku byl ve souboru gdevpsfx.c odhalen v\u00fdskyt funkce gs_type1_blend bez kontroly spr\u00e1vnosti hodnot. Na z\u00e1v\u011br model sestavil obsah souboru, jeho\u017e zpracov\u00e1n\u00ed vedlo k hav\u00e1rii kv\u016fli z\u00e1pisu dat do pam\u011bti mimo vyhrazen\u00fd buffer. <\/p>\n

V CGIF se AI model op\u00edral o to, \u017ee p\u0159i dekompresi GIF soubor\u016f knihovna pova\u017eovala velikost komprimovan\u00fdch dat za v\u017edy men\u0161\u00ed ne\u017e dekomprimovan\u00e1. Hled\u00e1n\u00ed zranitelnost\u00ed bylo soust\u0159ed\u011bno na ur\u010den\u00ed podm\u00ednek, za kter\u00fdch by komprimovan\u00e1 data pomoc\u00ed algoritmu LZW byla v\u011bt\u0161\u00ed ne\u017e dekomprimovan\u00e1. Takov\u00e9 podm\u00ednky byly nalezeny a AI model byl schopen vytvo\u0159it GIT soubor, jeho\u017e zpracov\u00e1n\u00ed vedlo k p\u0159ete\u010den\u00ed bufferu. V OpenSC byla probl\u00e9m identifikov\u00e1n po anal\u00fdze pou\u017e\u00edv\u00e1n\u00ed v k\u00f3du potenci\u00e1ln\u011b nebezpe\u010dn\u00fdch funkc\u00ed strrchr a strcat. <\/p>\n

Je pozorov\u00e1no, \u017ee jazykov\u00e9 modely dos\u00e1hly \u00farovn\u011b, kter\u00e1 umo\u017e\u0148uje odhalovat d\u0159\u00edve nezn\u00e1m\u00e9 zranitelnosti, a v bl\u00edzk\u00e9 budoucnosti p\u0159ekonaj\u00ed odborn\u00edky na bezpe\u010dnost rychlost\u00ed a rozsahem hled\u00e1n\u00ed zranitelnost\u00ed. P\u0159edpokl\u00e1d\u00e1 se, \u017ee n\u00e1r\u016fst po\u010dtu odhalen\u00fdch zranitelnost\u00ed si vy\u017e\u00e1d\u00e1 reformu zaveden\u00fdch proces\u016f zve\u0159ej\u0148ov\u00e1n\u00ed informac\u00ed, proto\u017ee sou\u010dasn\u011b vyhrazen\u00fdch 90 dn\u00ed pro opravy nebude sta\u010dit.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 AI model Claude Opus 4.6 odhalil v\u00edce ne\u017e 500 d\u0159\u00edve nezn\u00e1m\u00fdch zranitelnost\u00ed | ProHoster","description":"Spole\u010dnost Anthropic ozn\u00e1mila roz\u0161\u00ed\u0159en\u00ed v AI modelu Claude Opus 4.6 o mo\u017enosti hled\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du a sd\u00edlela v\u00fdsledky experimentu, v jeho\u017e pr\u016fb\u011bhu bylo odhaleno v\u00edce ne\u017e 500 d\u0159\u00edve nezn\u00e1m\u00fdch (0-day).","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day).","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}