---
language:
- code
tags:
- security
- poc
- hdf5
license: other
---

# HDF5 Security Research PoCs

This repository contains security-research PoC artifacts prepared for the
huntr Model Format Vulnerability program (beta). These files are for defensive
research and validation only.

Do not use these files in production workflows or load them outside an
isolated sandbox.

## PoC Files

- `poc/mdci_fd_parent_oob/mdci_fd_parent_oob.h5`
  Demonstrates a metadata cache image heap-buffer-overflow through the public
  `H5Fopen()` / `H5Fclose()` path.

- `poc/mdci_cache_image_dos/do_256m.h5`
  Demonstrates cache-image-driven memory exhaustion before rejection.

- `poc/extlink_default_follow/in/evil.h5`
  Demonstrates default external-link traversal by `h5dump -H`.

- `poc/extlink_default_follow/secret/target.h5`
  Benign target file referenced by `evil.h5`. It exists only to prove the
  traversal capability inside the sandbox.

## Safety

- No PoC performs a destructive action.
- No PoC exfiltrates data or performs network callbacks.
- The external-link PoC only reads a benign sibling file.
- The DoS and memory-corruption PoCs only demonstrate parser impact.