CVE-2024-36737

CVE-2024-36737 affects Oneflow v0.9.1 from OneFlow-Inc, with an improper input validation flaw in the oneflow.full parameter that can cause a Denial of Service. The issue is documented across multiple sources; the core detail is that a negative value input triggers DoS. Exploitation details are n...

CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36745

CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36743

CVE-2024-36743 affects OneFlow-Inc. Oneflow v0.9.1. A vulnerability in the function oneflow.dot can cause a Denial of Service when processing an empty array. The available documents do not specify the root cause in code terms or whether exploits are in the wild. Mitigation guidance appears in PT-...

CVE-2024-36742

OneFlow CVE-2024-36742 affects OneFlow (v0.9.1) with a DoS risk in the scatter_nd parameter when index exceeds the target shape. Reported across multiple sources (NVD, Red Hat, CVE listing); the vulnerable component is the oneflow.scatter_nd operation. The available descriptions state the impact ...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

PT-2024-27145 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting a negative value into the oneflow.full parameter. Recommendations: For version 0.9.1, avoid...

PT-2024-27142 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting a negative value into the dim parameter. Recommendations: For Oneflow version 0.9.1, consid...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1 that stems from improper validation of input...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1. An attacker exploited the vulnerability to cause a denial of service on the system...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1 that stems from improper validation of input...

PT-2024-27141 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot. Recommendations: For version 0.9.1, consider avoiding the use of oneflow.tensordot with...

PT-2024-27149 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: An issue in OneFlow-Inc. Oneflow allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot. Recommendations: For version 0.9.1, consider avoiding the use of...