Downloads · 30 days
0
orc-dos-poc
WolfpackArmy/orc-dos-poc
orc-dos-poc is a machine learning model from WolfpackArmy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
DoS via OOM Footer Bomb and Stripe Metadata Bloat in ORC files
Access
Public
Updated Apr 12, 2026
Repo size
—
Likes
1
Public
Repo makeup
Click a slice to open those files.
.orc24.1 KB · 92%
At a glance
- Access
- Public
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026
- SHA
- 8276a467
Model card
From the Hugging Face model README
ORC Model File Vulnerability PoC
Vulnerability
DoS via OOM Footer Bomb and Stripe Metadata Bloat in ORC files
Files
poc_oom_footer.orc— 56 bytes, postscript claims ~2GB footer causing OOM on readpoc_many_stripes.orc— 24KB, 1000 fake stripes causing metadata parsing overheadbenign.orc— Clean file for comparison
Reproduce
import pyorc
with open('poc_oom_footer.orc', 'rb') as f:
reader = pyorc.Reader(f) # Attempts ~2GB allocation for footer
- Created
- Apr 12, 2026
- Updated
- Apr 12, 2026