VULNERABILITY INTELLIGENCE
CVE-2026-41665
CVSS score6.1 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Description
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
Weakness classification
- PSIRT@samsung.com: CWE-190
Primary references
- PSIRT@samsung.com — Issue Tracking, Patch