This vulnerability involves an integer overflow (CWE-190) in the tensor allocation size calculation within Samsung Open Source ONE before version 1.30.0. When allocating memory for large tensors, the calculation may wrap around, resulting in less memory being allocated than required. This can cause application crashes or denial of service due to insufficient memory allocation. The vulnerability is local attack vector with high attack complexity and requires user interaction, impacting availability with no confidentiality or integrity impact.

The integer overflow can cause insufficient memory allocation for large tensors, potentially leading to denial of service or application instability. There is no impact on confidentiality or integrity. The attack requires local access with high complexity and user interaction, limiting the ease of exploitation.

No official patch or remediation level has been published by the vendor as of now. Users should upgrade to version 1.30.0 or later once available, as the affected versions are prior to 1.30.0. Until a patch is confirmed, avoid processing untrusted large tensors or limit tensor sizes to reduce risk. Monitor vendor advisories for updates on official fixes.