Description
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
High · 7.5
CVE-2025-65890
EUVD-2025-206474GHSA-gm99-g636-34fh
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with a…
Published Jan 28, 2026 · Updated Jul 5, 2026 · Assigned by mitre