🔐 CVE Alert

CVE-2026-40448

MEDIUM 5.3
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.

CWE CWE-190
Vendor samsung open source
Product one
Published Apr 22, 2026
Last Updated Apr 22, 2026
Stay Ahead of the Next One

Get instant alerts for samsung open source one

Be the first to know when new medium vulnerabilities affecting samsung open source one are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High

Affected Versions

Samsung Open Source / ONE
95fba2da1880ab3eabc719520e8591c33b65b272

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/Samsung/ONE/pull/16481