Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-70999
7.5
HIGHCVSS v3
Published
January 28, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.
Oneflow-Inc/oneflow
GitHubOneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
GitHubOneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.= 0.9.0NVD