Medium · 6.6 CVE-2026-40450 EUVD-2026-24618GHSA-85g4-fxfm-w35m

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption …

Published Apr 22, 2026 · Updated May 3, 2026 · Assigned by samsung.tv_appliance

Vendor: Samsung Open Source Product: ONE

Description

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.

Affected products

Vendor	Product	Affected	Fixed
Samsung Open Source	ONE	1.30.0	—

References

https://github.com/Samsung/ONE/pull/16481