עברית

Vulnerability Intelligence

CVE-2026-40448

Medium 5.3

Published
Last modified
NVD status
Analyzed

Description

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.

Affected products

samsung: one

References1

Metrics

CVSS 3.1
5.3 MEDIUM Score source: CNA CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
EPSS — exploit probability
0% percentile: 2 · as of 13 November 2026
CWE
CWE-190

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.