The vulnerability involves an integer overflow in the tensor allocation size calculation within Samsung Open Source ONE. This flaw can cause an insufficient memory allocation when processing large tensors, potentially leading to application crashes or denial of service. The weakness is identified as an integer overflow (CWE‑190).

Systems affected are those running Samsung Open Source ONE prior to commit 1.30.0. The specific product includes the Tensor processing module in the open source framework.

The CVSS score of 5.3 indicates moderate severity, and no EPSS information is available. The vulnerability is not listed in the CISA KEV catalog. Attack vectors are not explicitly described, but it is inferred that the flaw could be triggered when the application processes large tensor inputs, which may be controllable by an attacker if the input is externally sourced. Exploitation requires that the vulnerable allocation be used, and the effect is limited to resource exhaustion or crash rather than direct data compromise.