CVE-2026-6840: Samsung One

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.

Affected products

• Samsung One: before 1.30.0 (fixed in 1.30.0)

Published 2026-04-22. Last modified 2026-09-24.