EUVD-2026-24622
GHSA-5295-qq8m-4r9g
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Lifecycle Timeline
4DescriptionCVE.org
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
AnalysisAI
Integer overflow in scratch buffer initialization within Samsung Open Source ONE allows local attackers with user interaction to cause denial of service and memory corruption affecting large intermediate tensor processing. Versions prior to 1.30.0 are vulnerable. The vulnerability stems from incorrect size calculation during memory allocation for scratch buffers, resulting in undersized allocations that corrupt adjacent memory regions when large tensors are processed.
Technical ContextAI
Samsung Open Source ONE is a machine learning inference framework that processes neural network tensors. The vulnerability exists in the scratch buffer initialization logic, where an integer overflow occurs during size calculation for intermediate tensor storage. When buffer sizes exceed 32-bit integer limits, the calculation wraps around, producing abnormally small allocations. Subsequent write operations to process large tensors then overflow these undersized buffers, corrupting heap memory. This is a classic integer overflow (CWE-190) leading to buffer overflow conditions in a memory-intensive computational context.
RemediationAI
Vendor-released patch: Samsung Open Source ONE version 1.30.0 and later. Users should immediately update to version 1.30.0 or apply the fix from GitHub pull request #16481. For deployments unable to update immediately, restrict execution of inference workloads with large tensor inputs to isolated environments with memory protection mechanisms enabled. Disable or sandbox tensor processing features if they are not essential to device functionality. Test inference pipelines with expected tensor size distributions to identify and avoid triggering conditions that require scratch buffers exceeding 2GB in intermediate allocation size. Note that workarounds do not eliminate the root cause and patch deployment should be prioritized as the primary remediation.
Arbitrary file write as SYSTEM in Samsung MagicINFO 9 Server before version 21.1050 allows remote attackers to place att
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an un
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary
Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Integer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today