Samsung Open Source ONE Integer Overflow Vulnerability in Tensor Memory Allocation

An integer overflow vulnerability has been identified in Samsung Open Source ONE, in versions prior to 1.30.0. This vulnerability arises in the tensor allocation size calculation, potentially leading to insufficient memory allocation for large tensors.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition due to insufficient memory allocation for large tensors, causing potential application crashes or memory management issues.

Remediation

Users can update to version 1.30.0 or later to address this vulnerability.