oneflow records
29 published records for vendor oneflow.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation9
- CWE-400 Uncontrolled Resource Consumption7
- CWE-369 Divide By Zero4
- CWE-125 Out-of-bounds Read2
- CWE-129 Improper Validation of Array Index2
- CWE-682 Incorrect Calculation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
29 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-36736No exploit | An issue in the oneflow.permute component of OneFlow-Inc.oneflow · oneflow · CWE-682 | Critical9.8 | — | 0.6% | Jun 6, 2024 |
30Monitor | CVE-2025-65891No exploit | A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_prooneflow · oneflow · CWE-400 | High7.5 | — | 0.6% | Jan 28, 2026 |
30Monitor | CVE-2024-36734No exploit | Improper input validation in OneFlow-Inc.oneflow · oneflow · CWE-20 | High7.5 | — | 0.5% | Jun 6, 2024 |
30Monitor | CVE-2024-36737No exploit | Improper input validation in OneFlow-Inc.oneflow · oneflow · CWE-20 | High7.5 | — | 0.5% | Jun 6, 2024 |
30Monitor | CVE-2024-36740No exploit | An issue in OneFlow-Inc.oneflow · oneflow · CWE-129 | High7.5 | — | 0.5% | Jun 6, 2024 |
30Monitor | CVE-2024-36730No exploit | Improper input validation in OneFlow-Inc.oneflow · oneflow · CWE-755 | High7.5 | — | 0.5% | Jun 6, 2024 |
30Monitor | CVE-2024-36732No exploit | An issue in OneFlow-Inc.oneflow · oneflow · CWE-835 | High7.5 | — | 0.5% | Jun 6, 2024 |
30Monitor | CVE-2025-65890No exploit | A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with anoneflow · oneflow · CWE-400 | High7.5 | — | 0.5% | Jan 28, 2026 |
30Monitor | CVE-2025-71007No exploit | An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) voneflow · oneflow · CWE-20 | High7.5 | — | 0.5% | Jan 28, 2026 |
30Monitor | CVE-2025-65889No exploit | A type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted inoneflow · oneflow · CWE-400 | High7.5 | — | 0.4% | Jan 28, 2026 |
30Monitor | CVE-2025-65886No exploit | A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes.oneflow · oneflow · CWE-400 | High7.5 | — | 0.4% | Jan 28, 2026 |
30Monitor | CVE-2025-65888No exploit | A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to cause a Denial of Service (DoS) via a negativoneflow · oneflow · CWE-400 | High7.5 | — | 0.4% | Jan 28, 2026 |
30Monitor | CVE-2025-70999No exploit | A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Soneflow · oneflow · CWE-400 | High7.5 | — | 0.4% | Jan 28, 2026 |
30Monitor | CVE-2025-71003No exploit | An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via aoneflow · oneflow · CWE-20 | High7.5 | — | 0.4% | Jan 28, 2026 |
30Monitor | CVE-2024-36742No exploit | An issue in the oneflow.scatter_nd parameter OneFlow-Inc.oneflow · oneflow · CWE-20 | High7.5 | — | 0.4% | Jun 6, 2024 |
30Monitor | CVE-2024-36745No exploit | An issue in OneFlow-Inc.oneflow · oneflow · CWE-20 | High7.5 | — | 0.4% | Jun 6, 2024 |
30Monitor | CVE-2024-36743No exploit | An issue in OneFlow-Inc.oneflow · oneflow · CWE-129 | High7.5 | — | 0.4% | Jun 6, 2024 |
30Monitor | CVE-2025-71000No exploit | An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.oneflow · oneflow · CWE-400 | High7.5 | — | 0.4% | Jan 28, 2026 |
26Monitor | CVE-2025-65887No exploit | A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) oneflow · oneflow · CWE-369 | Medium6.5 | — | 0.4% | Jan 28, 2026 |
26Monitor | CVE-2025-71001No exploit | A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafoneflow · oneflow · CWE-125 | Medium6.5 | — | 0.3% | Jan 28, 2026 |
26Monitor | CVE-2025-63397No exploit | Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code doneflow · oneflow · CWE-20 | Medium6.5 | — | 0.3% | Nov 10, 2025 |
26Monitor | CVE-2025-71002No exploit | A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) vioneflow · oneflow · CWE-369 | Medium6.5 | — | 0.3% | Jan 28, 2026 |
26Monitor | CVE-2025-71006No exploit | A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via oneflow · oneflow · CWE-369 | Medium6.5 | — | 0.3% | Jan 28, 2026 |
26Monitor | CVE-2025-71004No exploit | A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a craoneflow · oneflow · CWE-125 | Medium6.5 | — | 0.3% | Jan 28, 2026 |
26Monitor | CVE-2025-71005No exploit | A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a coneflow · oneflow · CWE-369 | Medium6.5 | — | 0.3% | Jan 28, 2026 |
- CVE-2024-3673639Monitor
An issue in the oneflow.permute component of OneFlow-Inc.
CriticalCVSS 9.8No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2025-6589130Monitor
A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_pro
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJan 28, 2026
- CVE-2024-3673430Monitor
Improper input validation in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2024-3673730Monitor
Improper input validation in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2024-3674030Monitor
An issue in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2024-3673030Monitor
Improper input validation in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2024-3673230Monitor
An issue in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJun 6, 2024
- CVE-2025-6589030Monitor
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an
HighCVSS 7.5No exploitEPSS 1%oneflow · oneflowJan 28, 2026
- CVE-2025-7100730Monitor
An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) v
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-6588930Monitor
A type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted in
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-6588630Monitor
A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes.
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-6588830Monitor
A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to cause a Denial of Service (DoS) via a negativ
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7099930Monitor
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of S
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7100330Monitor
An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2024-3674230Monitor
An issue in the oneflow.scatter_nd parameter OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJun 6, 2024
- CVE-2024-3674530Monitor
An issue in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJun 6, 2024
- CVE-2024-3674330Monitor
An issue in OneFlow-Inc.
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJun 6, 2024
- CVE-2025-7100030Monitor
An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
HighCVSS 7.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-6588726Monitor
A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS)
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7100126Monitor
A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a craf
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-6339726Monitor
Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code d
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowNov 10, 2025
- CVE-2025-7100226Monitor
A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) vi
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7100626Monitor
A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7100426Monitor
A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a cra
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026
- CVE-2025-7100526Monitor
A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a c
MediumCVSS 6.5No exploitEPSS 0%oneflow · oneflowJan 28, 2026