CVE-2026-6839

Samsung Open Source / ONE PUBLISHED

Description (CNA)

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

Affected (CNA)

Vendor / product	Versions
Samsung Open Source / ONE	affected 1.30.0

CWE

CWE-1284

References

https://github.com/Samsung/ONE/pull/16481

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.