CVE-2026-6839

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

CVSS v3 6.6 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 4.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Samsung/ONE/pull/16481	Issue Tracking Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:one:*:*:*:*:*:*:*:*

History

26 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Validación incorrecta de los desplazamientos de tensores STRING podría permitir que metadatos de cadena malformados desencadenen un acceso fuera de límites durante la importación de tensores constantes en Samsung Open Source ONE. La versión afectada es anterior al commit 1.30.0.

Information

Published : 2026-04-22 07:16

Updated : 2026-10-26 00:10

NVD link : CVE-2026-6839

Mitre link : CVE-2026-6839

CVE.ORG link : CVE-2026-6839

JSON object : View

Products Affected

samsung

one

CWE

CWE-1284

Improper Validation of Specified Quantity in Input

{"id": "CVE-2026-6839", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6839", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-22T12:29:51.595229Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "PSIRT@samsung.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 1.8}]}, "affected": [{"source": "PSIRT@samsung.com", "affectedData": [{"vendor": "Samsung Open Source", "product": "ONE", "versions": [{"status": "affected", "version": "1.30.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-22T07:16:14.957", "references": [{"url": "https://github.com/Samsung/ONE/pull/16481", "tags": ["Issue Tracking", "Patch"], "source": "PSIRT@samsung.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "PSIRT@samsung.com", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE\nAffected version is prior to commit 1.30.0."}, {"lang": "es", "value": "Validaci\u00f3n incorrecta de los desplazamientos de tensores STRING podr\u00eda permitir que metadatos de cadena malformados desencadenen un acceso fuera de l\u00edmites durante la importaci\u00f3n de tensores constantes en Samsung Open Source ONE.\nLa versi\u00f3n afectada es anterior al commit 1.30.0."}], "lastModified": "2026-10-26T00:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:samsung:one:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DBBA2E4-036F-40C0-B2EF-D14AB3C83B6E", "versionEndExcluding": "1.30.0"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT@samsung.com"}