Skip to main content

Home
Patch the
Planet (New)
Explore
Services
Company
Open
Source
Blog (opens in a new tab)

Home
Explore
Weaponizing image scaling against production AI systems

993 Publications
661 Audits
200+ Open-source repos
Since 2012

Disclosure Open Original ↗

Weaponizing image scaling against production AI systems

Type

Disclosure

Client

Multiple

Date

2025

Domain

—

Effort

—

Section

—

View Advisory blog.trailofbits.com

Related

2025 Prompt injection to RCE in AI agents Disclosure
2025 Code integrity bypass in Electron applications Disclosure
2025 Exploiting zero days in abandoned hardware Disclosure
2024 Pedersen DKG vulnerability disclosure Disclosure
2024 LeftoverLocals disclosure Disclosure
2023 Eth ABI DoS disclosure Disclosure

© 2026 Trail of Bits

Privacy Policy Vulnerability Disclosure

Services

Trail of Bits Services

Software Assurance Multi-disciplinary security reviews across the whole SDLC, with a team sized to your threat model rather than a fixed template.

AI/ML Security We review AI systems end to end, from training data and MLOps pipelines to model artifacts, inference hardware, and deployed agent loops.
Application Security Deep code, cloud, and architecture review that finds the root cause and the fix that retires the whole bug class.
Blockchain We review every layer of a blockchain system, from smart contracts to nodes and bridges, backed by Slither, Echidna, and Medusa.
Cryptography PhD-level cryptographers who build and break real protocols, from zero-knowledge proofs and MPC to post-quantum migrations.

Security Engineering An embedded team that builds custom security tooling and remediates vulnerabilities across your pipeline, from development through deployment. Research & Development Multi-year research that uncovers Internet-scale vulnerabilities and turns the findings into open-source tools, papers, and standards. Everything we do View all services

Get in touch

How can we help?

Contact Us Tell us about the software you need secured. Patch the Planet Apply to our open-source security initiative, in collaboration with OpenAI.

Other ways to reach us

Company

Who we are

About Who we are, what we believe, and how we got here.
Team The researchers and engineers behind the work.
Careers Open roles and what it's like to work here.

Explore the work

↵ to search all 1088

MCP Security

Securing the Model Context Protocol: the mcp-context-protector wrapper, disclosed attack classes, and community defenses.

AI/ML Security

Testing Handbook

Guides for configuring and automating static and dynamic analysis tools.

Application Security

ZKDocs

Interactive documentation on zero-knowledge proof systems.

Cryptography

Building Secure Smart Contracts

Best practices for developing secure smart contracts.

Blockchain

CTF Field Guide

Field guide to winning at Capture The Flag competitions.

Education

Ruby Security Field Guide

Practical Ruby security guide.

Application Security

Nothing here matches. Press ↵ to search the full library.

Trail of Bits

Security Review

sigstore-rust

Technology Product Reviews

2026-10

sigstore-rust

Supply Chain

Trail of Bits

Security Review

Offchain Labs Glamsterdam Gas Parameters

Offchain Labs

2026-10

Offchain Labs Glamsterdam Gas Parameters

Blockchain

Trail of Bits

Security Review

Bron CGGMP21

Cryptography Reviews

2026-10

Bron CGGMP21

Crypto

Trail of Bits

Security Review

OpenAI OpenClaw

AI/ML Reviews

2026-09

OpenAI OpenClaw

AI/ML

Trail of Bits

Security Review

Yon Labs White Paper

Other/Multi-Chain

2026-09

Yon Labs White Paper

Blockchain

Trail of Bits

Security Review

Google Private AI

Compute, Secure Server-Side

AI/ML Reviews

2026-09

Google Private AI Compute, Secure Server-Side Memory

AI/ML

Trail of Bits

Security Review

Amazon Bee Private Compute

Technology Product Reviews

2026-09

Amazon Bee Private Compute

AppSec

Trail of Bits

Security Review

Offchain Labs OSP Soundness Guard

Offchain Labs

2026-09

Offchain Labs OSP Soundness Guard

Blockchain

Trail of Bits

Security Review

Gensyn Token Minting Cap

Ethereum/EVM

2026-09

Gensyn Token Minting Cap

Blockchain

Nothing here matches. Press ↵ to search the full library.

2026 · Systems

Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's Limits

Kevin Valerio

2026 · AI/ML

How we made Trail of Bits AI-Native (so far)

Dan Guido

2026 · Systems

Auditing Scapy With Agents

Clinton Thomas

2025 · Systems

Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source Software

Ronald Eytchison

2025 · Systems

Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber Challenge

Trent Brunson

2025 · Systems

Buttercup and DARPA's AI Cyber Challenge, Ringzer0

Henrik Brodin, Ronald Eytchison

2025 · Systems

Our experience competing in the AI Cyber Challenge

Michael Brown et al.

2025 · Blockchain

Mutation Testing with Slither: A New Way to Find High-Severity Issues

Guillermo Larregay

Nothing here matches. Press ↵ to search the full library.

Skill Slicing Code Context Trailmark · 2026-10 Skill YARA-X Rule Authoring Yara Authoring · 2026-10 Skill C/C++ Security Review C Review · 2026-10 Skill Code Improver Code Improver · 2026-10 Skill PR Improver Code Improver · 2026-10 Skill Semgrep Rule Variant Creator Semgrep Rule Variant Creator · 2026-10 Skill Skill Improver Code Improver · 2026-10 Skill CodeQL Analysis Static Analysis · 2026-10 Skill Semgrep Security Scan Static Analysis · 2026-10 Skill GitHub Triage Github Triage · 2026-10 Skill Dimensional Analysis Dimensional Analysis · 2026-10 Skill Adjudicate evidence Regression Hunt · 2026-10 Skill Discover candidates Regression Hunt · 2026-10 Skill Implement Patch Patching Bugs · 2026-10

Nothing here matches. Press ↵ to search the full library.

Browse all guides & handbooks →

Home Patch the Planet Explore Get in Touch

Services
Open Source
Company
Blog

Search

Esc

No results

Try different keywords, or browse everything in Explore.

Loading index…

↑ ↓ Navigate ↵ Open