VULNERABILITY INTELLIGENCE
CVE-2026-40448
CVSS score5.3 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Description
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.
Weakness classification
- CWE-190: Integer Overflow or Wraparound
Primary references
- PSIRT@samsung.com — Issue Tracking, Patch