CVE-2026-6839

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-6839

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6839.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-6839

Published

2026-04-22T06:07:06.857Z

Modified

2026-07-15T01:49:11.826581582Z

Severity

6.6 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVSS Calculator

Summary

[none]

Details

Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.

Database specific

{
    "cna_assigner": "samsung.tv_appliance",
    "cwe_ids": [
        "CWE-1284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6839.json"
}

References

Affected packages

Git / github.com/samsung/one

Affected ranges

Type

GIT

Repo

https://github.com/samsung/one

Events

Introduced

13084e4b734058cadc590e321c0b7669fbaf06df

Fixed

13084e4b734058cadc590e321c0b7669fbaf06df

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:samsung:one:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.30.0"
        },
        {
            "last_affected": "1.30.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.30.0"
        }
    ]
}

Affected versions

1.*

1.30.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6839.json"