CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36737

A security vulnerability exists in OneFlow-Inc. Oneflow version 0.9.1 due to improper input validation . Attackers can trigger a Denial of Service (DoS) by providing a negative value into the oneflow.full parameter. As a temporary workaround, users should validate input to ensure it does not cont...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36745

CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) . The vulnerability occurs when an empty array is processed using the oneflow.dot function. As a temporary workaround, users are advised to restrict input to oneflow.dot to prevent empty arrays from being ...

CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...

CVE-2024-36742

OneFlow CVE-2024-36742 affects OneFlow (v0.9.1) with a DoS risk in the scatter_nd parameter when index exceeds the target shape. Reported across multiple sources (NVD, Red Hat, CVE listing); the vulnerable component is the oneflow.scatter_nd operation. The available descriptions state the impact ...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1. An attacker exploited the vulnerability to cause a denial of service on the system...

PT-2024-27141 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot. Recommendations: For version 0.9.1, consider avoiding the use of oneflow.tensordot with...

PT-2024-27142 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting a negative value into the dim parameter. Recommendations: For Oneflow version 0.9.1, consid...

PT-2024-27150 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.index select parameter. Recommendations: For Oneflow version 0.9.1, as a temporary workaround,...

Oneflow Security Vulnerability

Oneflow is a deep learning framework open-sourced by Oneflow. A security vulnerability exists in Oneflow version v0.9.1 that stems from improper validation of input...

PT-2024-27140 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: Oneflow version 0.9.1 Description: The issue is related to improper input validation, allowing attackers to cause a Denial of Service DoS by inputting negative values into the oneflow.zeros/ones parameter. Recommendations: For version 0.9.1,...

PT-2024-27144 · Oneflow · Oneflow

Name of the Vulnerable Software and Affected Versions: OneFlow versions 0.9.1 Description: An issue in the oneflow.permute component of OneFlow-Inc causes an incorrect calculation when the same dimension operation is performed. Recommendations: For version 0.9.1, consider updating to a newer...