VULNERABILITY INTELLIGENCE

CVE-2026-6839

CVSS score6.6 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

Weakness classification

  • PSIRT@samsung.com: CWE-1284

Primary references