Joblib dtype metadata crash PoC
This repository contains a minimal proof of concept for a malformed .joblib artifact that crashes joblib.load() by changing one dtype metadata byte from f8 to O8.
Files
array_float64.joblib: benign baseline numeric Joblib array.dtype_o8.joblib: same size as baseline, one-byte dtype metadata mutation.reproduce_dtype_o8.py: subprocess-based reproducer.poc.zip: packaged PoC artifact.sha256.txt: checksums.
Expected behavior
Malformed dtype metadata should raise a Python exception.
Actual behavior
Normal joblib.load("dtype_o8.joblib") crashes the Python process natively. The artifact contains no command-execution payload.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support