EUVD-2026-42571
GHSA-95xm-4789-hr5f
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Local vector with user interaction reflects JS engine processing user-supplied scripts; PR:N as no OS credentials needed; A:H for reliable crash, I:L for stack corruption, C:N as no data exposure.
Primary rating from Vendor (samsung.tv_appliance).
CVSS VectorVendor: samsung.tv_appliance
Lifecycle Timeline
1DescriptionCVE.org
Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: before b30b63fc63b403907d8137da1c65aaa4521fe74e.
AnalysisAI
Stack-based buffer overflow in Samsung's Escargot JavaScript engine enables local attackers to crash the engine or corrupt stack memory by supplying malicious JavaScript input, requiring user interaction to trigger. All Escargot releases prior to commit b30b63fc63b403907d8137da1c65aaa4521fe74e are affected, with impacts including high availability loss and limited integrity compromise. No public exploit identified at time of analysis and this vulnerability has not been added to CISA KEV, though the local-vector, user-interaction requirement meaningfully constrains real-world exploitation surface.
Technical ContextAI
Escargot (CPE: cpe:2.3:a:samsung_open_source:escargot:*:*:*:*:*:*:*:*) is Samsung's open-source, lightweight JavaScript engine primarily designed for embedded and IoT environments such as Samsung smart TVs and appliances. CWE-121 (Stack-based Buffer Overflow) identifies the root cause: a fixed-size stack buffer is written beyond its bounds during JavaScript parsing or execution, overwriting adjacent stack frames. This class of vulnerability in a scripting engine typically arises during input handling - such as parsing deeply nested structures, oversized string literals, or malformed bytecode - where bounds checks are absent or insufficient. Because the overflow targets the stack rather than the heap, return address or saved frame pointer corruption is a plausible secondary impact beyond the immediate crash, though the CVSS vector's S:U (unchanged scope) and I:L suggest the practical exploitation outcome is limited.
RemediationAI
The upstream fix is available via GitHub pull request #1585 (https://github.com/Samsung/escargot/pull/1585), which introduces the corrected code at commit b30b63fc63b403907d8137da1c65aaa4521fe74e. Integrators and downstream consumers of the Escargot library should update to a build incorporating this commit or any subsequent tagged release that includes it; a released, versioned patch has not been independently confirmed from the available data. As a compensating control where updating is not immediately possible, deployments should restrict the sources of JavaScript input processed by Escargot to trusted, validated content, minimizing exposure to attacker-controlled scripts. On embedded platforms, enabling stack canaries and address-space layout randomization at the compiler and OS level will raise the bar for any attempt to escalate from crash to code execution, though these do not eliminate the DoS risk. No vendor security advisory URL beyond the GitHub references was available in the input data.
Out-of-bounds write in Samsung's Escargot lightweight JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3
Heap-based buffer overflow in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3) all
Use-after-free memory corruption in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault.0.0
Uncontrolled recursion in Samsung's Escargot JavaScript engine triggers excessive heap allocation, causing a denial-of-s
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from mu
Denial-of-service in Samsung's Escargot JavaScript engine (commit 590345cc) stems from multiple unhandled exceptional co
Excessive memory allocation in Samsung's Escargot JavaScript engine (commit 590345cc) triggers a denial-of-service condi
Denial-of-service via invalid pointer dereference in Samsung Open Source Escargot JavaScript engine affects the specific
Uncontrolled recursion in Samsung's Escargot JavaScript engine crashes the runtime when processing oversized serialized
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.0.0.
Out-of-bounds read and reachable assertion vulnerabilities in Samsung's open-source Escargot JavaScript engine allow a l
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today