CVE-2024-36743

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-06-06

Last modified

2025-02-13

Weaknesses

CWE-129, CWE-400

Affected products

• Oneflow (Oneflow)

References

• https://gist.github.com/Redmept1on/64aa53d37e99975725a7d3e2dc9d9761