Description
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.
Affected products
samsung: one
References1
- github.com/Samsung/ONE/pull/16481 Issue TrackingPatch
Metrics
- CVSS 3.1
-
6.6
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - EPSS — exploit probability
- 0% percentile: 3 · as of 13 November 2026
- CWE
- CWE-190
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.