This vulnerability involves an integer overflow in the output tensor copy size calculation within Samsung Open Source ONE software versions before 1.30.0. The overflow can cause the software to miscalculate the length of data to copy, resulting in memory corruption when processing oversized tensors. The issue is classified under CWE-190 (Integer Overflow or Wraparound). The CVSS 3.1 base score is 6.6, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, and impacts on confidentiality, integrity, and high impact on availability.

Successful exploitation could lead to memory corruption, which may cause application crashes or denial of service. The impact on confidentiality and integrity is low, but availability impact is high due to potential crashes. There are no known exploits in the wild currently.

No official patch or remediation level has been published by the vendor as of now. Users should monitor Samsung Open Source advisories for updates and apply version 1.30.0 or later once available to address this vulnerability. Until then, cautious handling of oversized tensors and limiting exposure to untrusted inputs may reduce risk.