CVE-2026-6839

Published: Apr 22, 2026Modified: Jun 17, 2026

6.6

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Exploitability: 1.8 / Impact: 4.7

Source: PSIRT@samsung.com (Secondary)

Description

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

Affected (1)

Products: Samsung: One

Samsung

1 product

One

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung One	Before 1.30.0

Related CWEs

CWE-1284

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://github.com/Samsung/ONE/pull/16481

Source: PSIRT@samsung.com

Issue TrackingPatch

Timeline

No history available yet.