TensorFlow JPEG Decoder DoS — Proof of Concept

CVE: Pending
Severity: High (CVSS 7.5) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Affected: tensorflow — DecodeJpegV2 in decode_image_op.cc

Summary

A ~200-byte crafted JPEG file triggers a ~10.8 GB unbounded memory allocation in TensorFlow's DecodeJpegV2 kernel. All other decoders in the same file (BMP, PNG, WebP) have hard limits — JPEG does not.

Files

poc_exploit.py — generates malicious JPEG and triggers OOM
vulnerability_report.md — full technical report

Quick Reproduction

pip install tensorflow
python3 poc_exploit.py

Researcher

Rodion Khoroshev (Rodion111)
Reported: 2026-04-09

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support