Downloads · 30 days
0
npy-oom-dos-poc
WolfpackArmy/npy-oom-dos-poc
npy-oom-dos-poc is a machine learning model from WolfpackArmy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Memory Exhaustion via Crafted .npy File Header (CWE-789 / CWE-190)
Access
Public
Updated Apr 12, 2026
Repo size
384 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 57%
At a glance
- Access
- Public
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026
- SHA
- c34466be
Model card
From the Hugging Face model README
NumPy .npy OOM Denial of Service PoC
Vulnerability
Memory Exhaustion via Crafted .npy File Header (CWE-789 / CWE-190)
File: numpy/lib/_format_impl.py, line 860 Impact: A ~128-byte .npy file triggers multi-gigabyte memory allocation, crashing the process
Files
oom_bomb_8gb.npy— 128 bytes, requests 8 GB allocationoom_bomb_16gb.npy— 128 bytes, requests 16 GB allocationoom_bomb_dtype.npy— 128 bytes, requests 2 GB via large dtype
How to reproduce
import numpy as np
# WARNING: This will attempt to allocate 8 GB of memory
arr = np.load('oom_bomb_8gb.npy', allow_pickle=False)
Root Cause
numpy.load() reads shape and dtype from the file header and allocates memory before reading any data. No size limit check exists.
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026