CVE-2026-6839CWE-1284

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung…

Medium · published April 22, 2026

CVSS v3.1
6.6
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE

Affected version is prior to commit 1.30.0.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-04-22T06:07Z
EPSS history
Timeline
  • 22 APR 06:07Z
    Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung…
    cvelistv5