EUVD-2026-21850
GHSA-jphw-6w8r-xh4r
Severity by source
AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Lifecycle Timeline
5DescriptionCVE.org
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
AnalysisAI
Type confusion vulnerability in Samsung Open Source Escargot JavaScript engine allows local attackers with user interaction to manipulate pointers and achieve memory corruption, enabling information disclosure and privilege escalation through heap spray and type-confusion exploitation techniques. CVSS score is 6.5; no public exploit code or CISA KEV status confirmed at time of analysis.
Technical ContextAI
Samsung Escargot is a lightweight JavaScript engine embedded in Samsung TVs and IoT appliances. This vulnerability exploits CWE-843 (Access of Resource Using Incompatible Type), a class flaw where the engine fails to properly validate object types during memory operations, allowing attackers to cast pointers to incompatible types and read or write arbitrary memory. The affected commit hash (97e8115ab1110bc502b4b5e4a0c689a71520d335) indicates the vulnerability exists in a specific development version of the engine. Type confusion in JIT-compiled JavaScript engines is particularly dangerous because it bypasses type safety guarantees that normally prevent pointer arithmetic and direct memory access in managed languages.
RemediationAI
Samsung has released a fix available in GitHub PR #1554 (https://github.com/Samsung/escargot/pull/1554); patched versions of Escargot should be incorporated into updated appliance firmware. Administrators managing Samsung IoT and TV devices should apply available firmware updates when released. Until patches are available, users should avoid running untrusted JavaScript code on these devices and disable or restrict JavaScript execution in appliance settings if the option exists. Network segmentation isolating IoT devices from sensitive systems and application whitelisting can reduce lateral movement risk if a device is compromised.
Arbitrary file write as SYSTEM in Samsung MagicINFO 9 Server before version 21.1050 allows remote attackers to place att
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an un
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary
Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today