treforbenbow/tensorrt-dos-poc-loop-hang
By treforbenbow · ↓ 0 · ♥ 0 · Updated 2026-03-04
What's in this repo
This page lists the files in treforbenbow/tensorrt-dos-poc-loop-hang, including dos_loop.onnx.
- 1 ONNX models (.onnx files)
- 5 files, including 1 .md, 1 .engine, 1 .onnx, 1 .py
- Last updated 2026-03-04
ONNX files
| File | Size | Download |
|---|---|---|
| dos_loop.onnx | — | Download |
How to use
These ONNX files can be loaded with ONNX Runtime. To inspect a model graph, upload the file to the Netron viewer. Download links point to the original files on Hugging Face.
README
TensorRT VULN-003: Inference DoS via Loop(INT64_MAX)
Vulnerability
A 338-byte ONNX model with a Loop operator set to INT64_MAX iterations compiles to a valid TensorRT engine that hangs indefinitely during inference. No timeout mechanism exists in TensorRT's execute_async_v3().
Impact
- Permanent denial of service for any TensorRT inference server
- 338-byte model file causes infinite hang
- Affects Triton, TensorRT-LLM, any TRT-based pipeline
Files
| File | Description |
|---|---|
| vuln003_loop_dos.py | Main PoC script |
| dos_loop.onnx | Malicious ONNX model (338 bytes) |
| dos_loop.engine | Compiled TRT engine (20,252 bytes) |
Reproduction
pip install tensorrt onnx torch numpy
python vuln003_loop_dos.py
Results
- Normal model inference (10 loop iterations): completes in 0.0s
- DoS model inference (INT64_MAX iterations): hangs indefinitely
- At 1 billion iterations/sec, would take 292 years to complete
- No timeout, no warning, no error — must kill the process
Files (5)
.gitattributes
README.md
dos_loop.engine
dos_loop.onnx
ONNX
vuln003_loop_dos.py
Related models
More from treforbenbow
More models
No task type declared.