CNNVD-202601-4739 Information

CNNVD ID

CNNVD-202601-4739

CVE-2025-65887

  • CNNVD Published: 2026-01-28

Description (Chinese)

Oneflow是Oneflow开源的一个深度学习框架。 OneFlow 0.9.0版本存在安全漏洞,该漏洞源于flow.floor_divide组件存在除零问题,可能导致通过包含零的特制输入张量进行拒绝服务攻击。

Description (English)

OneFlow is an in-depth learning framework for OneFlow open source. OneFlow version 0.9.0 contains a security loophole, which stems from the zero-exception problem of the Flow.floor divide component, which could lead to a denial of service attack with a zero-specific input grid.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Oneflow

Published

2026-01-28

Last Modified

2026-02-24

References

http://oneflow.com https://github.com/Daisy2ang https://github.com/Oneflow-Inc/oneflow https://github.com/Oneflow-Inc/oneflow/issues/10665

Patch

https://github.com/Oneflow-Inc/oneflow/releases

Share on: