Skip to content
Threat Feed

Product

Keras (>= 3.0.0, <= 3.12.0)

1 brief RSS
medium advisory

Keras Model Loader Vulnerable to Denial-of-Service via Malicious HDF5 Shape Bombs

Keras model loader is vulnerable to denial-of-service by loading specially crafted .keras files containing HDF5-based weight files with maliciously oversized dataset metadata, leading to immediate memory exhaustion during model loading.

Keras +2 denial-of-service hdf5 model-loading shape-bomb
2r 1t 1c 1i