CVE-2024-36740

The Oneflow deep learning framework, version v0.9.1 , is vulnerable to a Denial of Service (DoS) attack. The root cause is improper validation of array indices (CWE-129, CWE-20), where providing a negative index that exceeds the defined size range can trigger a crash or service disruption. To mit...