CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36737

Oneflow version 0.9.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation . An attacker can trigger the DoS by providing a negative value into the oneflow.full parameter. As a temporary workaround, users should avoid using negative values in this parameter and ...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36745

CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36743

The deep learning framework Oneflow v0.9.1 is vulnerable to a Denial of Service (DoS) attack. The root cause is improper validation of array index (CWE-129, CWE-400), which occurs when an empty array is processed using the oneflow.dot function. Impact includes potential system instability due to ...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36742

The deep learning framework Oneflow (version v0.9.1 ) is vulnerable to a Denial of Service (DoS) attack due to improper input validation. The issue resides in the oneflow.scatter_nd parameter, where an attacker can trigger a DoS if the index parameter exceeds the range of the shape. As no patched...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1 that stems from improper validation of input...

PT-2024-27150 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.index select parameter. Recommendations: For Oneflow version 0.9.1, as a temporary workaround,...

PT-2024-27142 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting a negative value into the dim parameter. Recommendations: For Oneflow version 0.9.1, consid...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1. An attacker exploited the vulnerability to cause a denial of service on the system...

PT-2024-27141 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot. Recommendations: For version 0.9.1, consider avoiding the use of oneflow.tensordot with...

CVE-2024-36740: Improper Validation of Array Index

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index as a negative number exceeds the range of size...

CVE-2024-36745: Improper Input Validation

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

PT-2024-27140 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting negative values into the oneflow.zeros/ones parameter. Recommendations: For version 0.9.1,...