Description
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.
Affected products
samsung: one
References1
- github.com/Samsung/ONE/pull/16481 Issue TrackingPatch
Metrics
- CVSS 3.1
-
6.6
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - EPSS — exploit probability
- 0% percentile: 5 · as of 13 November 2026
- CWE
- CWE-190
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.