YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Tensorizer allocation-bomb PoC (coordinated disclosure)
Security-research proof-of-concept for a denial-of-service (uncontrolled memory allocation,
CWE-789 / CWE-400) in CoreWeave tensorizer's .tensors
deserializer.
evil.tensors is a 262 KB file that declares a ~4.4 TB tensor. Loading it with
TensorDeserializer attempts the full allocation before validating the declared size against the
file, exhausting memory and crashing the process (RuntimeError: DefaultCPUAllocator: can't allocate 4398046511104 bytes).
Reported via the huntr.com Model File Vulnerabilities program. This is a harmless crash trigger (DoS only — no code execution); do not load it in a memory-constrained process without an allocation cap.