Samsung Open Source ONE Out-of-Bounds Access Vulnerability in Constant Tensor Import

A vulnerability exists in Samsung Open Source ONE versions prior to 1.30.0, due to improper validation of STRING tensor offsets. This flaw allows malformed string metadata to cause out-of-bounds access during the import of constant tensors.

Impact

Exploitation of this vulnerability leads to out-of-bounds access, which can potentially be exploited to cause a denial-of-service or to execute arbitrary code.

Remediation

Users can upgrade to version 1.30.0 or later to address this vulnerability.