CVE-2026-6839
Medium · 6.6CVSS
6.6
EPSS
0.1%
Published
Apr 22, 2026
CISA due date
—
The record
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-1284
- CVE-2026-103484 IVFFlat index build in pgvector before 0.8.7 allows a database user to write data… CWE-1284
- CVE-2026-75806 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be… CWE-1284
- CVE-2026-93749 source-map-js through 1.2.1 fails to validate the per-section offset line value in… CWE-1284
- CVE-2026-87962 t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in… CWE-1284
- CVE-2026-87735 An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. CWE-1284
- CVE-2026-87470 Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36… CWE-1284
- CVE-2026-79376 An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth… CWE-1284