CVE-2026-40449

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-40449

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40449.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-40449

Published

2026-04-22T05:51:35.259Z

Modified

2026-07-15T01:49:21.772000048Z

Severity

6.6 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVSS Calculator

Summary

[none]

Details

Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.

Database specific

{
    "cna_assigner": "samsung.tv_appliance",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40449.json",
    "cwe_ids": [
        "CWE-190"
    ]
}

References

Affected packages

Git / github.com/samsung/one

Affected ranges

Type

GIT

Repo

https://github.com/samsung/one

Events

Introduced

13084e4b734058cadc590e321c0b7669fbaf06df

Fixed

13084e4b734058cadc590e321c0b7669fbaf06df

Database specific

{
    "cpe": "cpe:2.3:a:samsung:one:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "1.30.0"
        },
        {
            "last_affected": "1.30.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.30.0"
        }
    ]
}

Affected versions

1.*

1.30.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40449.json"