Vulnerabilidades do Oneflow Oneflow
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oneflow Oneflow: 19 registro(s), com versões afetadas e correções.cpe:2.3:a:oneflow:oneflow
CVE-2025-71011
Média · 6.2
CWE-20 29/01/2026
Improper Input Validation em Oneflow
An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71009
Média · 6.2
CWE-20 29/01/2026
Improper Input Validation em Oneflow
An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted indices.
CVE-2025-71008
Média · 6.2
29/01/2026
A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.m…
A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71007
Alta · 7.5
CWE-20 28/01/2026
Improper Input Validation em Oneflow
An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71006
Média · 6.5
CWE-369 28/01/2026
A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0…
A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71005
Média · 6.5
CWE-369 28/01/2026
A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows…
A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71004
Média · 6.5
CWE-125 28/01/2026
Out-of-bounds Read em Oneflow
A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71003
Alta · 7.5
CWE-20 28/01/2026
Improper Input Validation em Oneflow
An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71002
Média · 6.5
CWE-369 28/01/2026
A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0…
A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71001
Média · 6.5
CWE-125 28/01/2026
Out-of-bounds Read em Oneflow
A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-71000
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-70999
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.
CVE-2025-65891
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
CVE-2025-65890
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
CVE-2025-65889
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-65888
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to cause a Denial of Service (DoS) via a negative or excessively large dimension value.
CVE-2025-65887
Média · 6.5
CWE-369 28/01/2026
A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0…
A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input tensor with zero.
CVE-2025-65886
Alta · 7.5
CWE-400 28/01/2026
Uncontrolled Resource Consumption em Oneflow
A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes.
CVE-2025-63397
Média · 6.5
CWE-20 10/11/2025
Improper Input Validation em Oneflow
Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code during broadcasting/type conversion.