CVEvulnerability
CVE-2026-40449
6.6 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-22
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
- Weaknesses
- CWE-190
Description
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
Affected configurations
• samsung one (< 1.30.0)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://github.com/Samsung/ONE/pull/16481 Issue Tracking, Patch