CVE-2026-6840

Summary

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Affected Software

Weaknesses

• CWE-129: CWE-129 Improper validation of array index

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/Samsung/ONE/pull/16481

• ←Previous
• Next→