High severity7.5OSV Advisory· Published Jan 28, 2026· Updated Jul 5, 2026
CVE-2025-70999
CVE-2025-70999
Description
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3v0.3.0, v0.5.0, v0.5.0b1, …+ 1 more
- (no CPE)range: v0.3.0, v0.5.0, v0.5.0b1, …
- (no CPE)range: =0.9.0
Patches
Vulnerability mechanics
References
1- github.com/Oneflow-Inc/oneflow/issues/10660nvdExploitIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.