CVE-2026-6839_CVE-2026-6839

6.6 / 10

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE
Affected version is prior to commit 1.30.0.

Basic Information

ID CVE-2026-6839

Source samsung.tv_appliance

Published Apr 22, 2026 at 06:07

Affected Product

Vendor Samsung Open Source

Product ONE

Version 1.30.0

Affected Versions Samsung Open Source ONE 1.30.0

CWE Classification

CWE-1284

References

github.com /Samsung/ONE/pull/16481

{
    "lastseen": "",
    "description": "Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE\nAffected version is prior to commit  1.30.0.",
    "published": "2026-04-22T06:07:06.857Z",
    "modified": "2026-04-22T06:07:06.857Z",
    "type": "cve",
    "title": "CVE-2026-6839",
    "source": "samsung.tv_appliance",
    "references": "https://github.com/Samsung/ONE/pull/16481",
    "id": "CVE-2026-6839",
    "bulletinFamily": "",
    "cwe": [
        "CWE-1284"
    ],
    "cvelist": null,
    "sourceData": "Samsung Open Source ONE 1.30.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.6,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "ONE",
    "version": "1.30.0",
    "vendor": "Samsung Open Source",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}