AVID-2026-R1494

Description

Vulnerability CVE-2024-36740

Details

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size.

Reason for inclusion in AVID: OneFlow is an AI framework used in building and running AI models. The CVE describes a software vulnerability (DoS) in the framework, which could affect AI model training/deployment pipelines. This is a software supply-chain issue in a component commonly used to build/run general-purpose AI systems, not hardware/firmware only. The report provides a CVE entry and description indicating a security vulnerability.

References

• NVD entry
• https://gist.github.com/Redmept1on/070f5b8b752079c6b761f00f3cab7103

Affected or Relevant Artifacts

• Developer: n/a
• Deployer: n/a
• Artifact Details:

Impact

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0100: Software Vulnerability
• Lifecycle stages: L06: Deployment

Other information

• Report Type: Advisory
• Credits:
• Date Reported: 2024-06-06
• Version: 0.3.3
• AVID Entry