VYPR
← All advisories
High severity7.5OSV Advisory· Published Jan 28, 2026· Updated Jul 5, 2026

CVE-2025-65891

CVE-2025-65891

Description

A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice (DoS) by invoking flow.cuda.get_device_properties() with an invalid or negative device index.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Oneflow Inc/OneflowOSV2 versions
    v0.3.0, v0.5.0, v0.5.0b1, …+ 1 more
    • (no CPE)range: v0.3.0, v0.5.0, v0.5.0b1, …
    • (no CPE)range: <0.9.0
  • Oneflow/Oneflow
    cpe:2.3:a:oneflow:oneflow:0.9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.