CVE Intelligence

Samsung Open Source vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Samsung Open Source products: 55 record(s), with severity, exploitation and fixes.

Escargot 26Rlottie 11ONE 9Walrus 4mTower 3Vyond 2

Exploited only (KEV) →

CVE-2026-10305 Medium · 6.1 CWE-125 Jun 4, 2026
Out-of-bounds Read in Samsung Open Source Rlottie
Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.
CVE-2026-8915 High · 8.8 CWE-787 May 27, 2026
Out-of-bounds Write in Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
CVE-2026-47317 High · 7.5 CWE-674 May 19, 2026
Uncontrolled Recursion in Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47316 High · 7.5 CWE-703 May 19, 2026
Improper Check or Handling of Exceptional Conditions in Samsung Escargot
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47315 High · 7.5 CWE-754 May 19, 2026
Improper Check for Unusual or Exceptional Conditions in Samsung Escargot
Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47314 Critical · 9.8 CWE-787 May 19, 2026
Out-of-bounds Write in Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47313 High · 7.5 CWE-789 May 19, 2026
Memory allocation with excessive size value vulnerability in Samsung Open Source…
Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47312 High · 7.5 CWE-763 May 19, 2026
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot…
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47311 Critical · 9.8 CWE-122 May 19, 2026
Heap-based Buffer Overflow in Samsung Escargot
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47310 Critical · 9.8 CWE-416 May 19, 2026
Use After Free in Samsung Escargot
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47309 High · 7.5 CWE-674 May 19, 2026
Uncontrolled Recursion in Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47308 High · 7.5 CWE-476 May 19, 2026
NULL Pointer Dereference in Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-47307 High · 7.5 CWE-476 May 19, 2026
NULL Pointer Dereference in Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-6840 Medium · 5.5 CWE-129 Apr 22, 2026
Missing bounds validation for operator could allow out of range operator-code lookup…
Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.
CVE-2026-6839 Medium · 6.6 CWE-1284 Apr 22, 2026
Improper validation of STRING tensor offsets could allows malformed string metadata to…
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.
CVE-2026-41667 Medium · 6.6 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.
CVE-2026-41666 Medium · 6.6 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.
CVE-2026-41665 Medium · 6.1 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
CVE-2026-41664 Medium · 6.6 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1.30.0.
CVE-2026-40450 Medium · 6.6 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.
CVE-2026-40449 Medium · 6.6 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.
CVE-2026-40448 Medium · 5.3 CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.
CVE-2026-40447 High · 7.5 CWE-190 Apr 13, 2026
Integer Overflow or Wraparound in Samsung Escargot
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-40446 Critical · 9.8 CWE-843 Apr 13, 2026
Type Confusion in Samsung Escargot
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25209 Critical · 9.1 CWE-125 Apr 13, 2026
Out-of-bounds Read in Samsung Escargot
Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.