1. Home
  2. CVE Database
  3. CVE-2026-6839
MEDIUM · 6.6

CVE-2026-6839

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior t...

Vulnerability Description

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
SamsungOne< 1.30.0

Related Weaknesses (CWE)

CWE-1284

References

FAQ

What is CVE-2026-6839?

CVE-2026-6839 is a vulnerability with a CVSS score of 6.6 (MEDIUM). Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior t...

How severe is CVE-2026-6839?

CVE-2026-6839 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-6839?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung One.