CVE Feed

    Dashboard / CVE / CVE-2026-6840

    CVE-2026-6840

    Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

    Published:Apr 22, 2026
    Last Modified:Apr 22, 2026
    EPS:Apr 22, 2026
    EPSS Score:0.00013
    CVSS Score:5.5

    Affected Products

    Vendor
    Samsung Open Source
    Product
    One

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-100 Overflow Buffers

    Related CVEs

    CVE-2026-6839 (CVSS 6.6) — Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds a…
    CVE-2026-41667 (CVSS 6.6) — Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buf…
    CVE-2026-41666 (CVSS 6.6) — Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access…
    CVE-2026-41665 (CVSS 6.1) — Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect …
    CVE-2026-41664 (CVSS 6.6) — Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory opera…
    CVE-2026-40450 (CVSS 6.6) — Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy …
    CVE-2026-40449 (CVSS 6.6) — Integer overflow in buffer size calculation could result in out of bounds memory access when handling large te…
    CVE-2026-40448 (CVSS 5.3) — Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High