CVE Feed

    Dashboard / CVE / CVE-2026-41665

    CVE-2026-41665

    Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.

    Published:Apr 22, 2026
    Last Modified:Apr 27, 2026
    EPS:Apr 22, 2026
    EPSS Score:0.00013
    CVSS Score:6.1

    Affected Products

    Vendor
    Samsung
    Product
    One
    Vendor
    Samsung Open Source
    Product
    One

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-6839 (CVSS 6.6) — Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds a…
    CVE-2026-41667 (CVSS 6.6) — Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buf…
    CVE-2026-41666 (CVSS 6.6) — Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access…
    CVE-2026-41664 (CVSS 6.6) — Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory opera…
    CVE-2026-40450 (CVSS 6.6) — Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy …
    CVE-2026-40449 (CVSS 6.6) — Integer overflow in buffer size calculation could result in out of bounds memory access when handling large te…
    CVE-2026-40448 (CVSS 5.3) — Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High