VYPR
← All advisories
Unrated severityOSV Advisory· Published Jan 28, 2026· Updated Jan 29, 2026

CVE-2025-70999

CVE-2025-70999

Description

A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Oneflow Inc/OneflowOSV2 versions
    v0.3.0, v0.5.0, v0.5.0b1, …+ 1 more
    • (no CPE)range: v0.3.0, v0.5.0, v0.5.0b1, …
    • (no CPE)range: = 0.9.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.