5.5
Medium
CVE-2026-6840 Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected…
Description
Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ONE | 1.30.0 | No fix stated |
Other CVEs of ONE
The 9 CVEs of ONE →
CVE-2026-6839
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access…
6.6
Medium
CVE-2026-41667
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing…
6.6
Medium
CVE-2026-41666
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during…
6.6
Medium
CVE-2026-41665
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory…
6.1
Medium