CVE-2026-6839
CVSS Score
6.6
EPSS Score
0.0%
EPSS Percentile
0th
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.
| CWE | CWE-1284 |
| Vendor | samsung open source |
| Product | one |
| Published | Apr 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for samsung open source one
Be the first to know when new medium vulnerabilities affecting samsung open source one are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High
Affected Versions
Samsung Open Source / ONE
1.30.0