Samsung Open Source ONE Integer Overflow Vulnerability in Tensor Data Size Calculation

Vulnerability

An integer overflow vulnerability has been identified in Samsung Open Source ONE, prior to version 1.30.0. This issue arises in the constant tensor data size calculation, where incorrect buffer sizing for large constant nodes could occur.

Impact

Exploitation of this vulnerability could lead to buffer overflows, potentially allowing for arbitrary code execution or causing a denial-of-service condition.

Remediation

Users can update to version 1.30.0 or later to address this vulnerability.

Added: Apr 22, 2026, 7:23 AM
Updated: Apr 22, 2026, 7:23 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
7.4
remediation
0.0
relevance
6.5
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.