Downloads · 30 days
0
hdf5-h5hl-fl-deserialize-hbo-poc
AgentRen/hdf5-h5hl-fl-deserialize-hbo-poc
hdf5-h5hl-fl-deserialize-hbo-poc is a machine learning model from AgentRen. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
This repo contains a malicious HDF5 file (malicious.h5) associated with upstream HDFGroup/hdf5 issue 5382 (reported against v1.14.6): heap-buffer-overflow in H5HLfldeserialize.
Access
Public
Updated Feb 2, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.h53.6 KB · 58%
At a glance
- License
- mit
- Access
- Public
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026
- SHA
- 6a129b7b
Model card
From the Hugging Face model README
HDF5 PoC: H5HL__fl_deserialize heap buffer overflow (malicious .h5)
This repo contains a malicious HDF5 file (malicious.h5) associated with upstream HDFGroup/hdf5 issue #5382 (reported against v1.14.6): heap-buffer-overflow in H5HL__fl_deserialize.
Files:
malicious.h5— crashing corpus filemalicious.h5.zip— zipped copy
Quick reproduction idea (best with ASAN-instrumented libhdf5):
import h5py
h5py.File('malicious.h5','r').close()
Upstream reference:
- License
- mit
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026