TensorProto.dims without checking total size.malicious_oom.onnx — Malicious ONNX model (136 bytes)poc_exploit.py — Exploit script (generator)vulnerability_report.md — Full technical report1pip install onnxruntime
2python3 poc_exploit.py
3python3 -c "import onnxruntime; onnxruntime.InferenceSession('malicious_oom.onnx')"