VULNERABILITY INTELLIGENCE

CVE-2025-63397

CVSS score6.5 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2025-11-10

Last modified2026-07-05

Description

Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code during broadcasting/type conversion.