PatchTheCVEoneflow vulnerabilities
Recent CVEs affecting oneflow products. 19 tracked.
oneflow has 19 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-29. Highest priority: CVE-2025-65891 (score 48/100).
- CVE-2025-71001 MEDIUM 6.5 DOWNGRADE A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Deni
- CVE-2025-71000 HIGH 7.5 DOWNGRADE An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service
- CVE-2025-70999 HIGH 7.5 DOWNGRADE A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows at
- CVE-2025-65891 HIGH 7.5 DOWNGRADE A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by inv
- CVE-2025-65890 HIGH 7.5 DOWNGRADE A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling f
- CVE-2025-65889 HIGH 7.5 DOWNGRADE A type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause a Denial of
- CVE-2025-65888 HIGH 7.5 DOWNGRADE A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to cause a Denial
- CVE-2025-65887 MEDIUM 6.5 DOWNGRADE A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to ca
- CVE-2025-65886 HIGH 7.5 DOWNGRADE A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via suppl
- CVE-2025-63397 MEDIUM 6.5 DOWNGRADE Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python
- CVE-2025-71011 MEDIUM 6.2 DOWNGRADE An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros comp
- CVE-2025-71009 MEDIUM 6.2 DOWNGRADE An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows atta
- CVE-2025-71008 MEDIUM 6.2 DOWNGRADE A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiabl
- CVE-2025-71007 HIGH 7.5 DOWNGRADE An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cau
- CVE-2025-71006 MEDIUM 6.5 DOWNGRADE A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause
- CVE-2025-71005 MEDIUM 6.5 DOWNGRADE A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a D
- CVE-2025-71004 MEDIUM 6.5 DOWNGRADE A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Den
- CVE-2025-71003 HIGH 7.5 DOWNGRADE An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a
- CVE-2025-71002 MEDIUM 6.5 DOWNGRADE A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to caus
FAQ
How do I fix oneflow vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oneflow being exploited right now?
None of the tracked oneflow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oneflow CVE should I patch first?
CVE-2025-65891 currently ranks highest (48/100): A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by inv.