PT-2026-34263 · Samsung · One

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-6840

Mitre

CVSS v3.1

5.5

Medium

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2026-6840

Affected Products

One

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6840 · Security Note
• https://github.com/Samsung/ONE/pull/16481 · Note