CVE-2026-40449

MEDIUM

Samsung Open Source One < 1.30.0 - Out-of-Bounds Access

Title source: rule

Description

Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.

References (1)

https://github.com/Samsung/ONE/pull/16481

Scores

CVSS v3 6.6

EPSS 0.0001

EPSS Percentile 3.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-190

Status published

Products (2)

samsung/one < 1.30.0

Samsung Open Source/ONE 1.30.0

Published Apr 22, 2026

Tracked Since Apr 22, 2026