{"id":"CVE-2026-6839","state":"PUBLISHED","title":"Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE","description":"Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE\nAffected version is prior to commit  1.30.0.","publishedAt":"2026-04-22T06:07:06.857Z","updatedAt":"2026-04-22T12:30:25.364Z","severity":{"score":6.6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","source":"samsung.tv_appliance"},"assigner":"samsung.tv_appliance","products":["Samsung Open Source ONE"],"affected":[{"vendor":"Samsung Open Source","product":"ONE","defaultStatus":"unaffected","versions":[{"version":"1.30.0","status":"affected"}]}],"references":["https://github.com/Samsung/ONE/pull/16481"],"weaknesses":["CWE-1284"],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/6xxx/CVE-2026-6839.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-6839","state":"PUBLISHED","datePublished":"2026-04-22T06:07:06.857Z","dateUpdated":"2026-04-22T12:30:25.364Z","assignerShortName":"samsung.tv_appliance","assignerOrgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateReserved":"2026-04-22T06:03:50.823Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE\nAffected version is prior to commit  1.30.0."}],"affected":[{"vendor":"Samsung Open Source","product":"ONE","defaultStatus":"unaffected","versions":[{"version":"1.30.0","status":"affected"}]}],"references":[{"url":"https://github.com/Samsung/ONE/pull/16481"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.6,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1284","lang":"en","description":"CWE-1284 Improper validation of specified quantity in input","type":"CWE"}]}],"providerMetadata":{"shortName":"samsung.tv_appliance","orgId":"ca193ba2-0cff-4e34-b04e-1ea07103c6fe","dateUpdated":"2026-04-22T06:07:06.857Z"},"impacts":[{"capecId":"CAPEC-153","descriptions":[{"lang":"en","value":"CAPEC-153 Input Data Manipulation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-22T12:29:51.595229Z","id":"CVE-2026-6839","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-22T12:30:25.364Z"}}]}}}