CVE-2025-65890 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-r…
High CVSS: 7.5

CVE-2025-65890

A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
Vendor
Oneflow
Product
Oneflow
CWE
CWE-400
Yayın Tarihi
2026-01-28 17:16:08
Güncelleme
2026-02-03 17:55:58
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-400 Oneflow HIGH Oneflow 2026

Referanslar

http://oneflow.com https://github.com/Daisy2ang https://github.com/Oneflow-Inc/oneflow https://github.com/Oneflow-Inc/oneflow/issues/10662