You can deploy this model and start earning money today!

hacnho/
openvino-space-to-batch-allocation-dos-poc

Views

No views yet

OpenVINO SpaceToBatch allocation DoS PoC

This repository contains two valid OpenVINO IR XML/BIN model pairs that differ only in the SpaceToBatch block_shape and pads_end constants embedded in the model file.

Observed behavior with openvino==2026.2.1 under a 2 GiB address-space cap:

control model:
- read_model() succeeds
- compile_model() succeeds
- inference succeeds with output shape [2, 1]
malicious model:
- read_model() succeeds
- compile_model() succeeds
- inference raises RuntimeError: std::bad_alloc

Public repo:

Repo: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc
Control XML: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc/resolve/main/control_space_to_batch_2.xml
Control BIN: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc/resolve/main/control_space_to_batch_2.bin
Malicious XML: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc/resolve/main/malicious_space_to_batch_300m.xml
Malicious BIN: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc/resolve/main/malicious_space_to_batch_300m.bin
Reproducer: https://huggingface.co/hacnho/openvino-space-to-batch-allocation-dos-poc/resolve/main/reproduce.py
Repo state at verification time: private=false, commit f66e750be0c53700f0b27500c4b7c104184e611b

Reproduction:

bash

python3 build_poc.py
python3 reproduce.py

hacnho/openvino-space-to-batch-allocation-dos-poc

OpenVINO SpaceToBatch allocation DoS PoC

hacnho/
openvino-space-to-batch-allocation-dos-poc