This vulnerability involves an integer overflow or wraparound (CWE-190) in the calculation of constant tensor data size within Samsung Open Source ONE before version 1.30.0. The overflow can cause incorrect buffer sizing when processing large constant nodes, which may result in memory corruption or application instability. The CVSS 3.1 base score is 6.6, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and high impact on availability.

Successful exploitation could lead to incorrect buffer allocation, potentially causing memory corruption or denial of service conditions. The CVSS vector indicates limited confidentiality and integrity impact but a high impact on availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor Samsung Open Source ONE updates and apply version 1.30.0 or later once officially released. Until then, avoid processing large constant nodes that might trigger the overflow if possible.