Approved changes feed: RSS · Atom

cpe:2.3:a:samsung_open_source:one:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung Open Source (9a33b057-1167-5824-ad99-0b6eb43ce780)
ProductOne (60c096a2-4280-5212-8fa0-4d0dc4678bbc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6840 vulnerable 2026-06-08 08:07:05.124667 Details available
MEDIUM (5.5)
Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.
Published: 2026-04-22T06:08:31.789Z
Updated: 2026-04-22T12:29:22.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6839 vulnerable 2026-06-08 08:07:05.123489 Details available
MEDIUM (6.6)
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.
Published: 2026-04-22T06:07:06.857Z
Updated: 2026-04-22T12:30:25.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41667 vulnerable 2026-06-08 08:03:15.670253 Details available
MEDIUM (6.6)
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.
Published: 2026-04-22T05:57:28.615Z
Updated: 2026-05-03T22:43:11.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41666 vulnerable 2026-06-08 08:03:15.669849 Details available
MEDIUM (6.6)
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.
Published: 2026-04-22T05:56:18.693Z
Updated: 2026-05-03T22:42:44.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41665 vulnerable 2026-06-08 08:03:15.669297 Details available
MEDIUM (6.1)
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
Published: 2026-04-22T05:55:17.438Z
Updated: 2026-05-03T22:42:18.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41664 vulnerable 2026-06-08 08:03:15.668193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40450 vulnerable 2026-06-08 08:01:20.764809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40449 vulnerable 2026-06-08 08:01:20.764272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40448 vulnerable 2026-06-08 08:01:20.763078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.