npz-oom-dos-poc

ericblackgachara/npz-oom-dos-poc

npz-oom-dos-poc is a machine learning model from ericblackgachara. Use it for the machine learning task on the model card, and read the license before you ship it in a product.

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Downloads · 30 days

Access

Public

Updated May 9, 2026

Repo size

121 KB

Likes

Public

Hugging Face

Repo makeup

Click a slice to open those files.

.pdf121 KB · 95%

At a glance

Access: Public
Created: May 9, 2026
Updated: May 9, 2026
SHA: 5e71d4aa

Model card

From the Hugging Face model README

NumPy NPZ — OOM DoS via Oversized Shape in .npz Archive

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Field	Value
Target	npz (huntr.com — NPZ (.npz) – NumPy)
Format	NumPy `.npz` ZIP archive
Vuln	CWE-789 — Same `read_array()` bug as .npy, triggered via ZIP member
CVSS	7.5 High
Trigger	`numpy.load("bomb.npz")["arr_0"]` → MemoryError
File size	244 bytes → 8 TiB allocation

Quick Repro

python3 poc/make_poc.py    # creates bomb.npz (244 bytes)
python3 poc/trigger.py     # MemoryError → crash

Files

poc/make_poc.py — builds bomb.npz
poc/trigger.py — triggers crash
poc/bomb.npz — malicious archive
report.md — huntr submission report
evidence/poc-run.html — evidence HTML

Note

Same root cause as the .npy finding (numpy/lib/_format_impl.py read_array()). Submit as a separate report under the npz target on huntr for a second bounty.

Created: May 9, 2026
Updated: May 9, 2026