Home

Description

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.

PUBLISHED Reserved 2026-04-22 | Published 2026-04-22 | Updated 2026-04-26 | Assigner samsung.tv_appliance




MEDIUM: 6.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Problem types

CWE-190 Integer overflow or wraparound

Product status

Default status
unaffected

1.30.0
affected

References

github.com/Samsung/ONE/pull/16481

cve.org (CVE-2026-41665)

nvd.nist.gov (CVE-2026-41665)

Download JSON