EUVD-2025-206472

A GPU device-ID validation flaw in the flow.cuda.getdevicecapability component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted device ID...

CVE-2025-65889

A type validation flaw in the flow.dstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-70999

A GPU device-ID validation flaw in the flow.cuda.getdevicecapability component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted device ID...

CVE-2025-71001

A segmentation violation in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-65888

A dimension validation flaw in the flow.empty component of OneFlow 0.9.0 allows attackers to cause a Denial of Service DoS via a negative or excessively large dimension value...

CVE-2025-71000

An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-5146

A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS by calling flow.cuda.synchronize with an invalid or out-of-range GPU device index...

CVE-2025-71003

CVE-2025-71003 is an input validation vulnerability in OneFlow v0.9.0, affecting the flow.arange() component and enabling a DoS via crafted input. Documents consistently indicate the affected software and component; no exploit payloads are provided in the sources. Remediation guidance appears inc...

CVE-2025-65888

A dimension validation flaw in the flow.empty component of OneFlow 0.9.0 allows attackers to cause a Denial of Service DoS via a negative or excessively large dimension value...

EUVD-2025-206424

An input validation vulnerability in the flow.arange component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Oneflow security vulnerabilities

OneFlow is an open-source deep learning framework developed by OneFlow. Version 0.9.0 of OneFlow contains a security vulnerability; this vulnerability stems from a floating-point exception in the flow.columnstack component, which could lead to a denial-of-service attack...

EUVD-2025-206483

A division-by-zero vulnerability in the flow.floordivide component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input tensor with zero...

CVE-2025-71002

A floating-point exception FPE in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-206453

A floating-point exception FPE in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-5213

Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description An input validation issue exists in the flow.arange component. This can be exploited to cause a Denial of Service DoS by providing a specially crafted input. Recommendations Update to a newer version that...

PT-2026-5178

A segmentation violation in the flow.column stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-71001

A segmentation violation in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-65889

A type validation flaw in the flow.dstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-65889

CVE-2025-65889 affects OneFlow v0.9.0 in the flow.dstack() function, where a type validation flaw can be exploited to induce a Denial of Service (DoS) through crafted input. The vulnerability is described across multiple sources (NVD/Red Hat/CVE; CIRCL sightings; OSV; Snyk) with the common impact...

CVE-2025-71002

CVE-2025-71002 describes a floating-point exception (FPE) in the OneFlow v0.9.0 flow.column_stack component that can be triggered by crafted input, resulting in a Denial of Service (DoS). Affected software/component: OneFlow 0.9.0, specifically the flow.column_stack/flow.column stack path. Root c...