A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
References
| Link | Resource |
|---|---|
| https://github.com/Daisy2ang | Not Applicable |
| https://github.com/Oneflow-Inc/oneflow/issues/10657 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
03 Feb 2026, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oneflow
Oneflow oneflow |
|
| References | () https://github.com/Daisy2ang - Not Applicable | |
| References | () https://github.com/Oneflow-Inc/oneflow/issues/10657 - Exploit, Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:oneflow:oneflow:0.9.0:*:*:*:*:*:*:* |
Information
Published : 2026-01-28 20:16
Updated : 2026-02-03 16:56
NVD link : CVE-2025-71002
Mitre link : CVE-2025-71002
CVE.ORG link : CVE-2025-71002
JSON object : View
Products Affected
oneflow
- oneflow