346 matches found
Oneflow security vulnerabilities
Oneflow is an open-source deep learning framework developed by Oneflow. Version 0.9.0 of Oneflow contains a security vulnerability. This vulnerability stems from a segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component, which could lead...
CVE-2025-71011
An input validation vulnerability in the flow.Tensor.newempty/flow.Tensor.newones/flow.Tensor.newzeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-71008
A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
Oneflow security vulnerabilities
Oneflow is an open-source deep learning framework developed by Oneflow. Version 0.9.0 of Oneflow contains a security vulnerability. This vulnerability stems from insufficient input validation for the flow.Tensor.newempty, flow.Tensor.newones, and flow.Tensor.newzeros components, which could lead ...
CVE-2025-71009
An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...
CVE-2025-71011
An input validation vulnerability in the flow.Tensor.newempty/flow.Tensor.newones/flow.Tensor.newzeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2025-206539
A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-71011: Improper Input Validation
An input validation vulnerability in the flow.Tensor.newempty/flow.Tensor.newones/flow.Tensor.newzeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-71009: Improper Input Validation
An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...
EUVD-2025-206541
An input validation vulnerability in the flow.Tensor.newempty/flow.Tensor.newones/flow.Tensor.newzeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-71008
A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-71009
An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...
PT-2026-5301
Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description An input validation issue exists in the flow.scatter/flow.scatter add component. This can be exploited to cause a Denial of Service DoS by providing a crafted indices input. Recommendations At the moment, ther...
CVE-2025-71008: Undefined Security Weakness
A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-71006 via oneflow (0.9.0)
oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-71006 Source advisory: SNYK:PYTHON-ONEFLOW-15162562...
Division by zero
Overview Affected versions of this package are vulnerable to Division by zero via the oneflow.reshape process. An attacker can cause the application to crash or become unresponsive by submitting specially crafted input that triggers a floating point exception. Remediation There is no fixed versio...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the indexadd function. An attacker can cause the application to crash or become unresponsive by submitting specially crafted input. Remediation There is no fixed version for oneflow. References -...
flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-71007 via oneflow (0.9.0)
oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-71007 Source advisory: SNYK:PYTHON-ONEFLOW-15162564...
