EUVD-2026-42572
GHSA-2f23-fgrf-4r2h
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
OOB read (CWE-125) plausibly leaks memory (C:L), overriding official C:N given the 'Information Disclosure' tag; local vector and user interaction confirmed.
Primary rating from Vendor (samsung.tv_appliance).
CVSS VectorVendor: samsung.tv_appliance
Lifecycle Timeline
2DescriptionCVE.org
Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b4708b84a.
AnalysisAI
Out-of-bounds read and write vulnerabilities in Samsung's open-source Escargot JavaScript engine allow a local attacker to cause memory corruption leading to high availability impact and limited integrity compromise. All Escargot versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a are affected, with the engine's primary deployment in Samsung TV appliance and IoT platforms. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in CISA KEV; however, the CVSS-assigned high availability impact and the buffer overflow primitive make crash-based denial-of-service the primary realistic threat.
Technical ContextAI
Escargot (CPE: cpe:2.3:a:samsung_open_source:escargot:*:*:*:*:*:*:*:*) is Samsung's lightweight open-source JavaScript engine primarily embedded in Samsung's IoTJS runtime and smart TV (Tizen-based) application platforms. CWE-125 (Out-of-Bounds Read) is the formally assigned root cause, though the description also confirms a co-occurring out-of-bounds write, together enabling the classic 'Overflow Buffers' pattern. The root cause class involves unsafe handling of JavaScript input that causes the engine to read or write beyond allocated buffer boundaries during script parsing or execution - a common class of bugs in native JavaScript VM implementations written in C/C++. The combined OOB read/write condition creates a potential memory disclosure vector as well as memory corruption, consistent with the 'Information Disclosure' tag despite the official C:N CVSS scoring.
RemediationAI
The upstream fix is available via GitHub pull request #1580 (https://github.com/Samsung/escargot/pull/1580), targeting commit 779f6bedf58f334dec64b0a51ebb724b4708b84a; however, a formal tagged release version incorporating this fix has not been independently confirmed from available data - platform integrators should verify against the upstream repository directly. Downstream Samsung TV or IoT platform firmware consumers should apply the vendor-issued firmware update that includes the patched Escargot commit once released. As a compensating control where patching is not immediately possible, restricting or disabling execution of untrusted or third-party JavaScript applications on affected Samsung TV/IoT devices reduces exposure, though this may limit platform functionality. There are no generic workarounds that fully mitigate OOB read/write without updating the engine itself.
Out-of-bounds write in Samsung's Escargot lightweight JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3
Heap-based buffer overflow in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3) all
Use-after-free memory corruption in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault.0.0
Uncontrolled recursion in Samsung's Escargot JavaScript engine triggers excessive heap allocation, causing a denial-of-s
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from mu
Denial-of-service in Samsung's Escargot JavaScript engine (commit 590345cc) stems from multiple unhandled exceptional co
Excessive memory allocation in Samsung's Escargot JavaScript engine (commit 590345cc) triggers a denial-of-service condi
Denial-of-service via invalid pointer dereference in Samsung Open Source Escargot JavaScript engine affects the specific
Uncontrolled recursion in Samsung's Escargot JavaScript engine crashes the runtime when processing oversized serialized
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.0.0.
Out-of-bounds read and reachable assertion vulnerabilities in Samsung's open-source Escargot JavaScript engine allow a l
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today