hacnho
/

openvino-range-allocation-dos-poc

proof-of-concept

Model card Files Files and versions

OpenVINO Range allocation DoS PoC

This repository contains two valid OpenVINO IR XML/BIN model pairs that differ only in the Range stop constant embedded in the model file.

Observed behavior with openvino==2026.2.1 under a 2 GiB address-space cap:

control model:
- read_model() succeeds
- compile_model() succeeds
- inference succeeds with output shape [2]
malicious model:
- read_model() succeeds
- compile_model() succeeds
- inference raises RuntimeError: std::bad_alloc

Files:

control_range_2.xml / .bin
malicious_range_300m.xml / .bin
reproduce.py

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support