CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.
Vendor
Product
CWE
Yayın Tarihi
2026-01-15 14:16:26
Güncelleme
2026-01-23 18:35:49
Source Identifier
cve-coordination@google.com
KEV Date Added
-