CVE-2026-40450

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-40450

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40450.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-40450

Published

2026-04-22T05:53:10.536Z

Modified

2026-07-08T08:19:52.916179937Z

Severity

6.6 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVSS Calculator

Summary

[none]

Details

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40450.json",
    "cwe_ids": [
        "CWE-190"
    ],
    "cna_assigner": "samsung.tv_appliance"
}

References

Affected packages

Git / github.com/samsung/one

Affected ranges

Type

GIT

Repo

https://github.com/samsung/one

Events

Introduced

13084e4b734058cadc590e321c0b7669fbaf06df

Fixed

13084e4b734058cadc590e321c0b7669fbaf06df

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:samsung:one:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.30.0"
        },
        {
            "last_affected": "1.30.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.30.0"
        }
    ]
}

Affected versions

1.*

1.30.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40450.json"