Threats affecting pkg:github/samsung/ONE

CVE-2026-6840 is a medium severity vulnerability in Samsung Open Source ONE prior to version 1.30.0. It involves improper validation of an array index (CWE-129) during model loading, where missing bounds checks on an operator code could allow out-of-range lookups. This vulnerability does not impact confidentiality or integrity but can cause availability issues. No official patch or remediation guidance is currently confirmed. There are no known exploits in the wild, and the product is not a cloud service. Users should monitor vendor advisories for updates on remediation.

CVE-2026-6839 is a medium severity vulnerability in Samsung Open Source ONE prior to version 1.30.0. It involves improper validation of string tensor offsets, which can lead to out-of-bounds access during constant tensor import when malformed string metadata is processed. This vulnerability could impact confidentiality, integrity, and availability to a limited extent. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.

Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.

CVE-2026-41664 is an integer overflow vulnerability in Samsung Open Source ONE prior to version 1.30.0. The flaw occurs during memory copy size calculation when handling large tensor shapes, potentially causing invalid memory operations. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity. There is no official patch or remediation level currently confirmed by the vendor. Exploitation requires local access with limited privileges and user interaction. The impact includes limited confidentiality and integrity loss, with a high impact on availability.

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.

Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.