A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.
References
| Link | Resource |
|---|---|
| http://oneflow.com | Product |
| https://github.com/Daisy2ang | Not Applicable |
| https://github.com/Oneflow-Inc/oneflow | Product |
| https://github.com/Oneflow-Inc/oneflow/issues/10661 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
03 Feb 2026, 17:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oneflow oneflow
Oneflow |
|
| CPE | cpe:2.3:a:oneflow:oneflow:0.9.0:*:*:*:*:*:*:* | |
| References | () http://oneflow.com - Product | |
| References | () https://github.com/Daisy2ang - Not Applicable | |
| References | () https://github.com/Oneflow-Inc/oneflow - Product | |
| References | () https://github.com/Oneflow-Inc/oneflow/issues/10661 - Exploit, Issue Tracking, Vendor Advisory |
29 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-400 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
28 Jan 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-28 18:16
Updated : 2026-02-03 17:55
NVD link : CVE-2025-65891
Mitre link : CVE-2025-65891
CVE.ORG link : CVE-2025-65891
JSON object : View
Products Affected
oneflow
- oneflow
CWE
CWE-400
Uncontrolled Resource Consumption