VULNERABILITY INTELLIGENCE

CVE-2026-40450

CVSS score6.6 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.

Weakness classification

  • PSIRT@samsung.com: CWE-190

Primary references