Home

Description

A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes.

PUBLISHED Reserved 2025-11-18 | Published 2026-01-28 | Updated 2026-01-29 | Assigner mitre

References

github.com/Daisy2ang

oneflow.com

github.com/Oneflow-Inc/oneflow

github.com/Oneflow-Inc/oneflow/issues/10666

cve.org (CVE-2025-65886)

nvd.nist.gov (CVE-2025-65886)

Download JSON