← Back

CVE-2026-6840

nvd nist
Published: Apr 22, 2026Modified: Sep 24, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: PSIRT@samsung.com (Secondary)

Description

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Affected (1)

Products: Samsung: One
Samsung
1 product
One
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
One
version < 1.30.0

Related CWEs

CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (1)

Source: PSIRT@samsung.com
Vendor AdvisoryPatch

Timeline

No history available yet.