hacnho/parquet-zstd-binary-memory-bomb-poc

Parquet ZSTD binary-field memory-bomb PoC

This repository hosts a benign security research PoC for a Parquet parser denial of service.

Files

• parquet-zstd-binary-200m.parquet

Reproduction

python3 - <<'PY'
import pyarrow.parquet as pq
t = pq.read_table("parquet-zstd-binary-200m.parquet")
print(len(t.column("x")[0].as_py()))
PY

Under a 1,200 MB virtual-memory cap this parser path fails with ArrowMemoryError.

Safety note

This artifact is a non-executable malformed model-file PoC for parser-stress testing only.