Samsung Open Source ONE Integer Overflow Vulnerability Leading to Out-of-Bounds Memory Access

An integer overflow vulnerability has been identified in Samsung Open Source ONE, prior to version 1.30.0. This issue arises in the buffer size calculation when handling large tensors, potentially leading to out-of-bounds memory access.

Impact

Exploitation of this vulnerability could cause out-of-bounds memory access, which may lead to memory corruption or other unintended behavior in the application.

Remediation

Users can update to version 1.30.0 or later to address this vulnerability.