← All advisories

High severity7.5NVD Advisory· Published Jun 6, 2024· Updated Jun 17, 2026

CVE-2024-36732

CVE-2024-36732

Description

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.tensordot.

Affected products

3

Oneflow/Oneflow
cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*
Oneflow Inc/Oneflowcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =0.9.1

Patches

Vulnerability mechanics

References

1

gist.github.com/Redmept1on/3feef7639b2bc7891d0cfda6d932adfdnvdBroken Link

News mentions

0

No linked articles in our index yet.