PT-2026-34262 · Samsung · One

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-6839

Mitre

CVSS v3.1

6.6

Medium

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-6839

Affected Products

One

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6839 · Security Note
• https://github.com/Samsung/ONE/pull/16481 · Note