CVE-2026-40450_CVE-2026-40450

6.6 / 10

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.

Basic Information

ID CVE-2026-40450

Source samsung.tv_appliance

Published Apr 22, 2026 at 05:53

Affected Product

Vendor Samsung Open Source

Product ONE

Version 1.30.0

Affected Versions Samsung Open Source ONE 1.30.0

CWE Classification

CWE-190

References

github.com /Samsung/ONE/pull/16481

{
    "lastseen": "",
    "description": "Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.\nAffected version is prior to commit  1.30.0.",
    "published": "2026-04-22T05:53:10.536Z",
    "modified": "2026-04-22T05:53:10.536Z",
    "type": "cve",
    "title": "CVE-2026-40450",
    "source": "samsung.tv_appliance",
    "references": "https://github.com/Samsung/ONE/pull/16481",
    "id": "CVE-2026-40450",
    "bulletinFamily": "",
    "cwe": [
        "CWE-190"
    ],
    "cvelist": null,
    "sourceData": "Samsung Open Source ONE 1.30.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.6,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "ONE",
    "version": "1.30.0",
    "vendor": "Samsung Open Source",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}