You can deploy this model and start earning money today!

hacnho/
openvino-onehot-allocation-dos-poc

Views

No views yet

OpenVINO OneHot allocation DoS PoC

This repository contains two valid OpenVINO IR XML/BIN model pairs that differ only in the OneHot depth constant embedded in the model file.

Observed behavior with openvino==2026.2.1 under a 2 GiB address-space cap:

control model:
- read_model() succeeds
- compile_model() succeeds
- inference succeeds with output shape [1, 2]
malicious model:
- read_model() succeeds
- compile_model() succeeds
- inference raises RuntimeError: std::bad_alloc