CVEvulnerability
CVE-2026-40450
6.6 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-22
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
- Weaknesses
- CWE-190
Description
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.
Affected configurations
• samsung one (< 1.30.0)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://github.com/Samsung/ONE/pull/16481 Issue Tracking, Patch