You need to agree to share your Hugging Face information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

Tensorizer Oversized Header Length PoC

This package supports a private Huntr MFV report for Tensorizer.

Files

tensorizer_oversized_header_len_poc.tensors: 122-byte crafted Tensorizer file.
make_poc.py: recreates the PoC file.
reproduce.py: safely demonstrates that TensorDeserializer reaches an attacker-controlled bytearray(header_len) allocation.

Reproduction

python make_poc.py
python -m pip install 'tensorizer==2.12.1' 'numpy<2'
python reproduce.py

Expected output:

exception_type=AllocationAttempt
exception_message=attacker-controlled bytearray allocation attempted: 536870912 bytes
allocation_calls=[0, 536870912]

The allocation is guarded at 1 MiB so this verification does not allocate the requested memory.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support