Skip to main content

Java CVE-2026-25204

| EUVD-2026-21762 MEDIUM
Deserialization of Untrusted Data (CWE-502)
2026-04-13 samsung.tv_appliance
6.2
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Apr 13, 2026 - 01:19 vuln.today
EUVD ID Assigned
Apr 13, 2026 - 01:15 euvd
EUVD-2026-21762
Analysis Generated
Apr 13, 2026 - 01:15 vuln.today
CVE Published
Apr 13, 2026 - 00:47 nvd
MEDIUM 6.2

DescriptionNVD

Deserialization of untrusted data vulnerability in Samsung Open Source Escarogt Java Script allows denial of service condition via process abort.

This issue affects escarogt prior to commit hash

97e8115ab1110bc502b4b5e4a0c689a71520d335

AnalysisAI

Deserialization of untrusted data in Samsung Open Source Escargot JavaScript engine prior to commit 97e8115ab1110bc502b4b5e4a0c689a71520d335 allows local attackers without privileges to trigger a denial of service condition via process abort. The vulnerability exploits unsafe deserialization of Java objects, resulting in application termination rather than code execution. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-25204 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy