CVE-2026-41665

MEDIUM CVSS 6.1 View on NVD ↗

Description

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

References

https://github.com/Samsung/ONE/pull/16481

Published: Apr 22, 2026 07:16 UTC Modified: Apr 22, 2026 21:23 UTC