Oneflow vulnerabilities
We track 13 vulnerabilities in Oneflow products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on January 28, 2026.
Latest Oneflow vulnerabilities
- 7.5 High severity
An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows…
An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows…
An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Oneflow: Uncontrolled Resource Consumption
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.
- 7.5 High severity
Oneflow: Uncontrolled Resource Consumption
A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
- 7.5 High severity
Oneflow: Uncontrolled Resource Consumption
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
- 7.5 High severity
Oneflow: Uncontrolled Resource Consumption
A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to cause a Denial of Service (DoS) via a negative or excessively large dimension value.
- 7.5 High severity
oneflow: Improper Validation of Array Index
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size.
- 7.5 High severity
Improper input validation in OneFlow-Inc.
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the dim parameter.
- 7.5 High severity
oneflow: Improper Handling of Exceptional Conditions
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.
- 7.5 High severity
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS)…
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.
- 7.5 High severity
Improper input validation in OneFlow-Inc.
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
- 9.8 Critical severity
Oneflow: Incorrect Calculation
An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed.
- 7.5 High severity
An issue in the oneflow.scatter_nd parameter OneFlow-Inc.
An issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index parameter exceeds the range of shape.