---
license: mit
tags:
  - onnx
  - security-research
---

# Security Research PoC - ONNX Shape Inference DoS

This repository contains a proof-of-concept ONNX model for a security vulnerability disclosure via huntr.com.

**DO NOT use this model for inference.** It is designed to demonstrate a denial-of-service vulnerability in ONNX shape inference.

## Files

- `recursive_function_dos.onnx` (209 bytes) - Malicious ONNX model with self-recursive model-local function
- `reproduce.py` - Reproduction script

## Vulnerability

A self-referencing model-local function causes unbounded C++ recursion in `ShapeInferenceImplBase::ProcessCall()`, resulting in SIGSEGV (unrecoverable process crash).

## Reproduction

```bash
pip install onnx==1.21.0
python reproduce.py
# Expected: exit code 139 (SIGSEGV)
```