CVE-2024-36743

The deep learning framework Oneflow v0.9.1 is vulnerable to a Denial of Service (DoS) attack. The root cause is improper validation of array index (CWE-129, CWE-400), which occurs when an empty array is processed using the oneflow.dot function. Impact includes potential system instability due to ...