CoolFace
Modelpublic

mikio815/keras-redos-dtypepolicymap-poc

sourceHugging Facemitupdated 5mo agoView on Hugging Face
0likes4downloads
Model Card

Keras .keras model — security PoC artifact

Proof-of-concept .keras artifact submitted to the huntr Model File Vulnerability program.

⚠️ Security research artifact. Do not load on production hosts. CPU usage will spike for tens of seconds.

Status

Reported to huntr; awaiting maintainer fix. Full technical details will be published after the issue is confirmed and addressed, per huntr disclosure policy.

Files

FilePurpose
dtype_policy_map_redos.kerasPre-built malicious .keras artifact.
make_redos_model.pyBuild a fresh artifact.
verify_redos_model.pyLoad the artifact in a child process, measure load time, fail closed on timeout.
scaling_datapoints.txtReference timings.

Reproduction

bash
pip install keras==3.14.0 numpy
export KERAS_BACKEND=numpy

python verify_redos_model.py dtype_policy_map_redos.keras --op load --timeout 30

Expected: a multi-second load_elapsed_seconds from a documented, default-safe API call, with safe_mode=True. The verifier runs the load in a child process so the parent can terminate it on timeout.

Affected versions

  • —Keras 3.15.0 (master b1859b1)
  • —Keras 3.14.0 (PyPI)
  • —Reproduces on Linux and macOS, NumPy and TensorFlow backends.

Disclosure

Public technical writeup will be linked here once the upstream fix is in place. Until then, this repository hosts only the PoC artifact and reproduction scripts required by the huntr submission process.