CVE-2026-6840CWE-129

CVE-2026-6840

Medium · published April 22, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Missing bounds validation for operator could allow out of range operator-code lookup during model loading

Affected version is prior to commit 1.30.0.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-04-22T11:16Z
Affected products (1)
ProductVersionsFixed in
samsung/one< 1.30.01.30.0
References (1)
https://github.com/Samsung/ONE/pull/16481 · [email protected]
EPSS history
Timeline
  • 22 APR 06:08Z
    Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0
    cvelistv5