hacnho/openvino-randomuniform-allocation-dos-poc

OpenVINO RandomUniform allocation DoS PoC

This repository contains two valid OpenVINO IR XML/BIN model pairs that differ only in the RandomUniform output shape embedded in the model file.

Observed behavior with openvino==2026.2.1 under a 2 GiB address-space cap:

• control model:
  • read_model() succeeds
  • compile_model() succeeds
  • inference succeeds with output shape [1, 2]
• malicious model:
  • read_model() succeeds
  • compile_model() succeeds
  • inference raises RuntimeError: std::bad_alloc