Samsung Open Source ONE Integer Overflow Vulnerability in Tensor Memory Initialization

An integer overflow vulnerability has been identified in Samsung Open Source ONE, prior to version 1.30.0. This issue arises in the scratch buffer initialization size calculation, leading to incorrect memory initialization for large intermediate tensors.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition by allowing for the manipulation of memory allocation, potentially leading to application crashes or unexpected behavior.

Remediation

Users can update to version 1.30.0 or later to address this vulnerability.