{"id":157454,"date":"2026-02-08T11:12:03","date_gmt":"2026-02-08T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej"},"modified":"2026-02-08T11:12:03","modified_gmt":"2026-02-08T09:12:03","slug":"ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","title":{"rendered":"AI model Claude Opus 4.6 odhalil viac ako 500 predt\u00fdm nezn\u00e1mych zranite\u013enost\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spolo\u010dnos\u0165 Anthropic ozn\u00e1mila roz\u0161\u00edrenie schopnost\u00ed AI modelu Claude Opus 4.6 na vyh\u013ead\u00e1vanie zranite\u013enost\u00ed v k\u00f3de a zdie\u013eala v\u00fdsledky experimentu, po\u010das ktor\u00e9ho bolo identifikovan\u00fdch viac ako 500 predt\u00fdm nezn\u00e1mych (0-day) zranite\u013enost\u00ed v posledn\u00fdch verziach r\u00f4znych otvoren\u00fdch projektov. Pr\u00e1ca bola zameran\u00e1 na vyh\u013ead\u00e1vanie zranite\u013enost\u00ed sp\u00f4soben\u00fdch probl\u00e9mami pri pr\u00e1ci s pam\u00e4\u0165ou, preto\u017ee ich existencia sa \u013eah\u0161ie overuje. V\u0161etk\u00fdm identifikovan\u00fdm zranite\u013enostiam bol pridelen\u00fd vysok\u00fd \u00farove\u0148 nebezpe\u010denstva. Ka\u017ed\u00e1 zranite\u013enos\u0165 bola ru\u010dne skontrolovan\u00e1 a potvrden\u00e1 zamestnancami spolo\u010dnosti Anthropic alebo zapojen\u00fdmi extern\u00fdmi bezpe\u010dnostn\u00fdmi v\u00fdskumn\u00edkmi. <\/p>\n

Na anal\u00fdzu zranite\u013enost\u00ed boli vyu\u017eit\u00e9 k\u00f3dov\u00e9 z\u00e1klady popul\u00e1rnych otvoren\u00fdch projektov, ktor\u00e9 u\u017e dlhodobo prech\u00e1dzaj\u00fa kontinu\u00e1lnym fuzzing testovan\u00edm v slu\u017ebe OSS-Fuzz. Na rozdiel od fuzzing testovania, pri ktorom sa generuje pr\u00fad r\u00f4znych n\u00e1hodn\u00fdch kombin\u00e1ci\u00ed vstupn\u00fdch \u00fadajov, AI model sa sna\u017eil analyzova\u0165 k\u00f3d s oh\u013eadom na predch\u00e1dzaj\u00face opravy, aby odhalil podobn\u00e9 neopravovan\u00e9 chyby, vy\u010dle\u0148uj\u00fac problematick\u00e9 vzory a logicky vyviedol, ak\u00e9 vstupn\u00e9 \u00fadaje m\u00f4\u017eu naru\u0161i\u0165 priebeh vykon\u00e1vania. <\/p>\n

Inform\u00e1cie o identifikovan\u00fdch zranite\u013enostiach po\u010das experimentu u\u017e za\u010dali by\u0165 pred\u00e1van\u00e9 spr\u00e1vcov, s ktor\u00fdmi sa vykon\u00e1va spolo\u010dn\u00e1 pr\u00e1ca na prij\u00edman\u00ed opr\u00e1v. Aby sme pomohli spr\u00e1vcov po\u010das vykonanej kontroly, boli manu\u00e1lne vyvinut\u00e9 patche na opravu identifikovan\u00fdch probl\u00e9mov. Ako pr\u00edklad s\u00fa uveden\u00e9 tri zranite\u013enosti v GhostScript, OpenSC a CGIF, ktor\u00e9 boli v \u010dase publik\u00e1cie odstr\u00e1nen\u00e9 spr\u00e1vcami. <\/p>\n

Konfigur\u00e1cia pou\u017eit\u00e1 na identifik\u00e1ciu probl\u00e9mov sa nel\u00ed\u0161ila od tradi\u010dn\u00fdch syst\u00e9mov automatick\u00e9ho vyh\u013ead\u00e1vania zranite\u013enost\u00ed \u2013 model Claude Opus 4.6 mal pr\u00edstup k virtu\u00e1lnom stroji<\/a>, v ktorom okrem sk\u00faman\u00e9ho k\u00f3du boli nain\u0161talovan\u00e9 typick\u00e9 n\u00e1stroje pre v\u00fdvoj\u00e1rov (coreutils, Python a pod.) a utility na ladenie a anal\u00fdzu zranite\u013enost\u00ed (vr\u00e1tane util\u00edt na fuzzing testovanie). Modelu neboli poskytnut\u00e9 jasn\u00e9 pokyny na pou\u017e\u00edvanie t\u00fdchto n\u00e1strojov a neboli poskytnut\u00e9 \u0161peci\u00e1lne inform\u00e1cie o met\u00f3dach vyh\u013ead\u00e1vania zranite\u013enost\u00ed. Modelu bola iba stanoven\u00e1 \u00faloha a bola mu poskytnut\u00e1 pr\u00edle\u017eitos\u0165 samostatne prem\u00fd\u0161\u013ea\u0165 o optim\u00e1lnom vyu\u017eit\u00ed dostupn\u00fdch n\u00e1strojov. <\/p>\n

Pri h\u013eadan\u00ed zranite\u013enost\u00ed v GhostScript model AI spo\u010diatku vysk\u00fa\u0161al fuzzingov\u00e9 testovanie, ale ke\u010f to neprinieslo v\u00fdsledky, pre\u0161iel k anal\u00fdze k\u00f3du. Anal\u00fdza k\u00f3du tie\u017e nedala v\u00fdsledky a potom sa model za\u010dal zaobera\u0165 hist\u00f3riou zmien v git a v jednom z commitov si v\u0161imol zmienku o kontrole hran\u00edc buffera. Rozborem commitu model zistil, \u017ee oprava pridala ch\u00fdbaj\u00facu kontrolu hran\u00edc buffera pri spracovan\u00ed p\u00edsiem. <\/p>\n

N\u00e1sledne model identifikoval k\u00f3d, ktor\u00fd bol pred opravou a sna\u017eil sa n\u00e1js\u0165 v zvy\u0161ku k\u00f3du podobn\u00e9 vzory pou\u017e\u00edvania problematickej funkcie, ktor\u00e9 ostali neopravn\u00e9. Nakoniec v s\u00fabore gdevpsfx.c bolo identifikovan\u00e9 volanie funkcie gs_type1_blend bez kontroly spr\u00e1vnosti hodn\u00f4t. Na konci model zvolil obsah s\u00faboru, ktor\u00e9ho spracovanie viedlo k hav\u00e1rii z d\u00f4vodu zapisovania \u00fadajov do oblasti pam\u00e4te mimo pridelen\u00e9ho buffera. <\/p>\n

Pri CGIF sa model AI odv\u00edjal od toho, \u017ee pri dekompresii GIF s\u00faborov kni\u017enica pova\u017eovala, \u017ee ve\u013ekos\u0165 komprimovan\u00fdch \u00fadajov je v\u017edy men\u0161ia ako dekomprimovan\u00fdch. H\u013eadanie zranite\u013enosti bolo s\u00fastreden\u00e9 na ur\u010denie podmienok, za ktor\u00fdch bud\u00fa skomprimovan\u00e9 \u00fadaje algoritmom LZW v\u00e4\u010d\u0161ie ako dekomprimovan\u00e9. Podobn\u00e9 podmienky boli n\u00e1jden\u00e9 a model AI dok\u00e1zal zostavi\u0165 GIT s\u00fabor, ktor\u00e9ho spracovanie viedlo k prete\u010deniu buffera. V OpenSC bola probl\u00e9m identifikovan\u00e1 po anal\u00fdze pou\u017eitia v k\u00f3de potenci\u00e1lne nebezpe\u010dn\u00fdch funkci\u00ed strrchr a strcat. <\/p>\n

Observuje sa, \u017ee jazykov\u00e9 modely dosiahli \u00farove\u0148, ktor\u00e1 umo\u017e\u0148uje odha\u013eova\u0165 predt\u00fdm nezn\u00e1me zranite\u013enosti a \u010doskoro prekonaj\u00fa odborn\u00edkov na bezpe\u010dnos\u0165 v r\u00fdchlosti a rozsahu h\u013eadania zranite\u013enost\u00ed. Predpoklad\u00e1 sa, \u017ee rast po\u010dtu odhalen\u00fdch zranite\u013enost\u00ed si bude vy\u017eadova\u0165 reformovanie existuj\u00facich procesov zverej\u0148ovania inform\u00e1ci\u00ed, preto\u017ee aktu\u00e1lne pridelen\u00fdch 90 dn\u00ed na opravu bude nedosta\u010duj\u00face.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0449\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c. \u0412\u0441\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157454","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AI model Claude Opus 4.6 odhalil viac ako 500 predt\u00fdm nezn\u00e1mych zranite\u013enost\u00ed | ProHoster","description":"Spolo\u010dnos\u0165 Anthropic ozn\u00e1mila roz\u0161\u00edrenie schopnost\u00ed v AI modeli Claude Opus 4.6 na h\u013eadanie zranite\u013enost\u00ed v k\u00f3de a zdie\u013eala v\u00fdsledky experimentu, po\u010das ktor\u00e9ho identifikovala viac ako 500 predt\u00fdm nezn\u00e1mych (0-day).","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AI-\u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0432 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus 4.6 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 (0-day).","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/ai-model-claude-opus-4-6-vyyavila-bolee-500-ranee-neizvestnyh-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-08T09:12:03+00:00","article:modified_time":"2026-02-08T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157454","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 09:12:54","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 09:12:03","updated":"2026-02-08 09:12:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/157454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=157454"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/157454\/revisions"}],"predecessor-version":[{"id":164240,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/157454\/revisions\/164240"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=157454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=157454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=157454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}