Samsung Open Source ONE Integer Overflow Vulnerability in Memory Size Calculation for Tensors

An integer overflow vulnerability has been identified in Samsung Open Source ONE, prior to version 1.30.0. This issue arises in the memory copy size calculation for tensors, particularly with large tensor shapes. The overflow can lead to invalid memory operations, potentially causing memory corruption or other unintended behavior.

Impact

Exploitation of this vulnerability could result in invalid memory operations, potentially leading to memory corruption or other unintended consequences.

Remediation

Users can update to version 1.30.0 or later to address this vulnerability.