EUVD-2026-24622
GHSA-5295-qq8m-4r9g
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
AnalysisAI
Integer overflow in scratch buffer initialization within Samsung Open Source ONE allows local attackers with user interaction to cause denial of service and memory corruption affecting large intermediate tensor processing. Versions prior to 1.30.0 are vulnerable. The vulnerability stems from incorrect size calculation during memory allocation for scratch buffers, resulting in undersized allocations that corrupt adjacent memory regions when large tensors are processed.
Technical ContextAI
Samsung Open Source ONE is a machine learning inference framework that processes neural network tensors. The vulnerability exists in the scratch buffer initialization logic, where an integer overflow occurs during size calculation for intermediate tensor storage. When buffer sizes exceed 32-bit integer limits, the calculation wraps around, producing abnormally small allocations. Subsequent write operations to process large tensors then overflow these undersized buffers, corrupting heap memory. This is a classic integer overflow (CWE-190) leading to buffer overflow conditions in a memory-intensive computational context.
RemediationAI
Vendor-released patch: Samsung Open Source ONE version 1.30.0 and later. Users should immediately update to version 1.30.0 or apply the fix from GitHub pull request #16481. For deployments unable to update immediately, restrict execution of inference workloads with large tensor inputs to isolated environments with memory protection mechanisms enabled. Disable or sandbox tensor processing features if they are not essential to device functionality. Test inference pipelines with expected tensor size distributions to identify and avoid triggering conditions that require scratch buffers exceeding 2GB in intermediate allocation size. Note that workarounds do not eliminate the root cause and patch deployment should be prioritized as the primary remediation.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.
Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information
Remote unauthenticated code execution in Veeam ONE (CPE cpe:2.3:a:veeam:one) allows attackers to run arbitrary code on t
A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ON
Authentication coercion in Veeam ONE lets an unauthenticated network attacker force the Veeam ONE service account to per
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remo
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remot
Unauthenticated arbitrary file read in Veeam ONE exposes sensitive server-side files to remote attackers without requiri
Remote code execution in Veeam ONE, the enterprise backup monitoring and analytics platform, is achievable by high-privi
SQL injection in Veeam ONE ≤ 13.0.2 allows any authenticated low-privileged user to extract database contents over the n
NTLM credential capture in Veeam ONE exposes the Reporter service account to any low-privileged authenticated user over
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today