YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
ONNX Runtime OOM DoS — Proof of Concept
Vulnerability
CWE-770: Unbounded memory allocation in ONNX Runtime C++ core during initializer parsing.
ONNX Runtime allocates memory based on TensorProto.dims without checking total size.
Impact
136-byte model → 2^60 element allocation → std::bad_alloc → process crash.
Files
malicious_oom.onnx— Malicious ONNX model (136 bytes)poc_exploit.py— Exploit script (generator)vulnerability_report.md— Full technical report
Reproduction
pip install onnxruntime
python3 poc_exploit.py
python3 -c "import onnxruntime; onnxruntime.InferenceSession('malicious_oom.onnx')"
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support