Samsung ONE CVE-2026-40448

| EUVD-2026-24614 MEDIUM
Integer Overflow or Wraparound (CWE-190)
2026-04-22 samsung.tv_appliance GHSA-cfg6-vcc7-59p9
5.3
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High

Lifecycle Timeline

1
Analysis Generated
Apr 22, 2026 - 06:49 vuln.today

DescriptionNVD

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.

AnalysisAI

Integer overflow in tensor allocation size calculation within Samsung Open Source ONE prior to version 1.30.0 allows local attackers with user interaction to cause denial of service or memory corruption. The vulnerability arises when processing large tensors, where insufficient memory allocation due to integer wraparound can lead to heap corruption. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-40448 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy