Vulnerabilidades de Samsung Open Source
CVEs publicadas que afetam produtos de Samsung Open Source: 55 registro(s), com severidade, exploração e correções.
CVE-2026-10305
Média · 6.1
CWE-125 04/06/2026
Out-of-bounds Read em Samsung Open Source Rlottie
Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers.
This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.
CVE-2026-8915
Alta · 8.8
CWE-787 27/05/2026
Out-of-bounds Write em Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
CVE-2026-47317
Alta · 7.5
CWE-674 19/05/2026
Uncontrolled Recursion em Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47316
Alta · 7.5
CWE-703 19/05/2026
Improper Check or Handling of Exceptional Conditions em Samsung Escargot
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47315
Alta · 7.5
CWE-754 19/05/2026
Improper Check for Unusual or Exceptional Conditions em Samsung Escargot
Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47314
Crítica · 9.8
CWE-787 19/05/2026
Out-of-bounds Write em Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47313
Alta · 7.5
CWE-789 19/05/2026
Memory allocation with excessive size value vulnerability in Samsung Open Source…
Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47312
Alta · 7.5
CWE-763 19/05/2026
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot…
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47311
Crítica · 9.8
CWE-122 19/05/2026
Heap-based Buffer Overflow em Samsung Escargot
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47310
Crítica · 9.8
CWE-416 19/05/2026
Use After Free em Samsung Escargot
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47309
Alta · 7.5
CWE-674 19/05/2026
Uncontrolled Recursion em Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47308
Alta · 7.5
CWE-476 19/05/2026
NULL Pointer Dereference em Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-47307
Alta · 7.5
CWE-476 19/05/2026
NULL Pointer Dereference em Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-6840
Média · 5.5
CWE-129 22/04/2026
Missing bounds validation for operator could allow out of range operator-code lookup…
Missing bounds validation for operator could allow out of range operator-code lookup during model loading
Affected version is prior to commit 1.30.0.
CVE-2026-6839
Média · 6.6
CWE-1284 22/04/2026
Improper validation of STRING tensor offsets could allows malformed string metadata to…
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE
Affected version is prior to commit 1.30.0.
CVE-2026-41667
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes.
Affected version is prior to commit 1.30.0.
CVE-2026-41666
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation.
Affected version is prior to commit 1.30.0.
CVE-2026-41665
Média · 6.1
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-41664
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes.
Affected version is prior to commit 1.30.0.
CVE-2026-40450
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-40449
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40448
Média · 5.3
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40447
Alta · 7.5
CWE-190 13/04/2026
Integer Overflow or Wraparound em Samsung Escargot
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-40446
Crítica · 9.8
CWE-843 13/04/2026
Type Confusion em Samsung Escargot
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-25209
Crítica · 9.1
CWE-125 13/04/2026
Out-of-bounds Read em Samsung Escargot
Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.