EUVD-2026-21850
GHSA-jphw-6w8r-xh4r
Severity by source
AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
AnalysisAI
Type confusion vulnerability in Samsung Open Source Escargot JavaScript engine allows local attackers with user interaction to manipulate pointers and achieve memory corruption, enabling information disclosure and privilege escalation through heap spray and type-confusion exploitation techniques. CVSS score is 6.5; no public exploit code or CISA KEV status confirmed at time of analysis.
Technical ContextAI
Samsung Escargot is a lightweight JavaScript engine embedded in Samsung TVs and IoT appliances. This vulnerability exploits CWE-843 (Access of Resource Using Incompatible Type), a class flaw where the engine fails to properly validate object types during memory operations, allowing attackers to cast pointers to incompatible types and read or write arbitrary memory. The affected commit hash (97e8115ab1110bc502b4b5e4a0c689a71520d335) indicates the vulnerability exists in a specific development version of the engine. Type confusion in JIT-compiled JavaScript engines is particularly dangerous because it bypasses type safety guarantees that normally prevent pointer arithmetic and direct memory access in managed languages.
RemediationAI
Samsung has released a fix available in GitHub PR #1554 (https://github.com/Samsung/escargot/pull/1554); patched versions of Escargot should be incorporated into updated appliance firmware. Administrators managing Samsung IoT and TV devices should apply available firmware updates when released. Until patches are available, users should avoid running untrusted JavaScript code on these devices and disable or restrict JavaScript execution in appliance settings if the option exists. Network segmentation isolating IoT devices from sensitive systems and application whitelisting can reduce lateral movement risk if a device is compromised.
More in Samsung Open Source
View allHeap buffer overflow in Samsung's rlottie animation rendering library allows remote denial-of-service via maliciously cr
Uncontrolled resource consumption in Samsung's open-source rlottie library allows a crafted Lottie animation file to tri
Out-of-bounds write in Samsung's Escargot lightweight JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3
Heap-based buffer overflow in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3) all
Use-after-free memory corruption in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d
Out-of-bounds write in Samsung's Escargot JavaScript engine allows attacker-supplied scripts to corrupt memory through t
Integer overflow in Samsung Escargot JavaScript engine allows remote attackers to trigger buffer overflows without authe
NULL pointer dereference in Samsung's open-source Walrus WebAssembly runtime crashes the parser when processing malforme
NULL pointer dereference in Samsung Open Source Walrus's WebAssembly binary parser causes application-level denial of se
Uncontrolled recursion in Samsung's Escargot JavaScript engine triggers excessive heap allocation, causing a denial-of-s
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from mu
Denial-of-service in Samsung's Escargot JavaScript engine (commit 590345cc) stems from multiple unhandled exceptional co
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today