PT-2026-34262 · Samsung · Open Source One
CVSS v3.1
6.6
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Samsung Open Source ONE versions prior to 1.30.0
Description
Improper validation of STRING tensor offsets allows malformed string metadata to trigger out of bounds access during constant tensor import.
Recommendations
Update to version 1.30.0 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open Source One