Description
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1.30.0.
Affected products
samsung: one
References1
- github.com/Samsung/ONE/pull/16481 Issue TrackingPatch
Metrics
- CVSS 3.1
-
6.6
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - EPSS — exploit probability
- 0% percentile: 1 · as of 13 November 2026
- CWE
- CWE-190
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.