CVE-2026-40450
CVSS Score
6.6
EPSS Score
0.0%
EPSS Percentile
0th
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.
| CWE | CWE-190 |
| Vendor | samsung open source |
| Product | one |
| Published | Apr 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for samsung open source one
Be the first to know when new medium vulnerabilities affecting samsung open source one are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High
Affected Versions
Samsung Open Source / ONE
1.30.0