VULNERABILITY INTELLIGENCE

CVE-2026-40449

CVSS score6.6 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.

Weakness classification

  • PSIRT@samsung.com: CWE-190

Primary references