An integer overflow in the tensor copy size calculation within Samsung Open Source ONE before version 1.30.0 can cause out-of-bounds memory access during loop state propagation. This vulnerability is classified under CWE-190. The CVSS 3.1 base score is 6.6, reflecting medium severity with local attack vector, low complexity, no privileges required, but user interaction needed. The vulnerability affects confidentiality, integrity, and availability to varying degrees. No patch or official remediation has been disclosed yet.

Successful exploitation could lead to out-of-bounds memory access, potentially causing partial loss of confidentiality and integrity, and a high impact on availability of the affected system. The attack requires local access and user interaction, limiting remote exploitation possibilities. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using affected versions prior to 1.30.0 where possible. Monitor vendor communications for updates on patches or mitigations.