CVE-2026-41667 | THREATINT

Description

Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.

PUBLISHED Reserved 2026-04-22 | Published 2026-04-22 | Updated 2026-04-26 | Assigner samsung.tv_appliance

MEDIUM: 6.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Problem types

CWE-190 Integer overflow or wraparound

Product status

Default status

unaffected

1.30.0

affected

References

github.com/Samsung/ONE/pull/16481

cve.org (CVE-2026-41667)

nvd.nist.gov (CVE-2026-41667)

Download JSON