DL4J Keras HDF5 dimension-truncation PoC
Warning: This repository contains a deliberately malformed model file that can terminate a process and corrupt native heap memory when loaded by an affected DL4J importer. Do not load it outside an isolated test environment.
This gated repository supports a coordinated vulnerability report submitted through huntr's Model File Formats program.
Files
keras_dim_truncation_poc.h5โ malicious Keras-2-style HDF5 modelkeras_control.h5โ structurally equivalent control with a normal dataset shape
Target
org.deeplearning4j:deeplearning4j-modelimport:1.0.0-M2.1- DeepLearning4J current master at commit
4c22ac5fe4a8350d05d224e7f4499429f7f69c93
Integrity
F800543294641C27D2521659FF1577D1416781DE716748CA68F2ED40D488DCCB keras_dim_truncation_poc.h5
F2CF6450B5325B2FF5FE5F377F2BBEDD19CA3020828C9DFE21B9FC798C375418 keras_control.h5
Full reproduction steps, root-cause analysis, and impact details are included in the corresponding private huntr report.
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support