NumPy NPZ — OOM DoS via Oversized Shape in .npz Archive

Status: PoC CONFIRMED ✅ — Ready for huntr submission

Field	Value
Target	npz (huntr.com — NPZ (.npz) – NumPy)
Format	NumPy `.npz` ZIP archive
Vuln	CWE-789 — Same `read_array()` bug as .npy, triggered via ZIP member
CVSS	7.5 High
Trigger	`numpy.load("bomb.npz")["arr_0"]` → MemoryError
File size	244 bytes → 8 TiB allocation

Quick Repro

python3 poc/make_poc.py    # creates bomb.npz (244 bytes)
python3 poc/trigger.py     # MemoryError → crash

Files

poc/make_poc.py — builds bomb.npz
poc/trigger.py — triggers crash
poc/bomb.npz — malicious archive
report.md — huntr submission report
evidence/poc-run.html — evidence HTML

Note

Same root cause as the .npy finding (numpy/lib/_format_impl.py read_array()). Submit as a separate report under the npz target on huntr for a second bounty.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support