CVE-2026-6840

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - PSIRT@samsung.com

Published

2026-04-22

Last modified

2026-10-26

Weaknesses

CWE-129

Affected products

• One (Samsung)
• One (Samsung Open Source)

References

• https://github.com/Samsung/ONE/pull/16481