Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-65886 Shape Mismatch Vulnerability in OneFlow v0.9.0 Enables Denial of Service Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-65886
Post summary
The brief post announces a Shape Mismatch flaw in OneFlow v0.9.0 that can cause a denial‑of‑service condition.
CVE-2025-65886 A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted tensor shapes. https://www.cve.org/CVERecord?id=CVE-2025-65886
Post summary
CVE-2025-65886 is a shape‑mismatch vulnerability in OneFlow 0.9.0 that can cause a DoS through crafted tensor shapes; no PoC, exploit code, patch or active exploitation is noted.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oneflow | oneflow | 0.9.0 | - | - |