EUVD-2026-42578
GHSA-7947-c2xp-c8w5
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Local vector and user interaction required to feed crafted JS; no privilege needed; crash impact is high availability, integrity low from assertion side-effect, no confirmed data disclosure.
Primary rating from Vendor (samsung.tv_appliance).
CVSS VectorVendor: samsung.tv_appliance
Lifecycle Timeline
2DescriptionCVE.org
Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation.
This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.
AnalysisAI
Out-of-bounds read and reachable assertion vulnerabilities in Samsung's open-source Escargot JavaScript engine allow a local attacker to cause a denial of service and limited data manipulation by supplying crafted JavaScript input. All versions prior to commit 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c are affected, with the primary real-world impact being an availability loss (crash) and low-confidence integrity effect. No public exploit code or CISA KEV listing has been identified at time of analysis.
Technical ContextAI
Escargot (CPE: cpe:2.3:a:samsung_open_source:escargot:*:*:*:*:*:*:*:*) is Samsung's open-source ECMAScript interpreter designed for resource-constrained embedded platforms such as smart TVs and IoT devices. CWE-125 (Out-of-Bounds Read) is the root cause class, meaning the engine reads beyond the intended boundary of a buffer during JavaScript parsing or execution, which can trigger a reachable assertion - an internal consistency check that aborts the process when violated. The secondary tag 'Input Data Manipulation' aligns with the low integrity impact (I:L) in the CVSS vector, suggesting the OOB read may permit limited overread that can influence program state. The local attack vector (AV:L) reflects that Escargot processes scripts in an embedded/local execution context rather than as a network-facing service.
RemediationAI
Upstream fix available via GitHub pull request #1586 (https://github.com/Samsung/escargot/pull/1586); a released, tagged patched version is not independently confirmed from the available data - downstream consumers should verify whether a stable release incorporating commit 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c has been published. Vendors embedding Escargot in firmware or products should apply the fix commit and rebuild affected components. As a compensating control where patching is not immediately feasible, restricting the ability to supply untrusted JavaScript to the Escargot runtime (e.g., limiting script input to trusted, validated sources) reduces exposure, though this may constrain legitimate scripting functionality depending on deployment context.
Out-of-bounds write in Samsung's Escargot lightweight JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3
Heap-based buffer overflow in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d3) all
Use-after-free memory corruption in Samsung's Escargot JavaScript engine (commit 590345cc6258317c5da850d846ce6baaf2afc2d
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault.0.0
Uncontrolled recursion in Samsung's Escargot JavaScript engine triggers excessive heap allocation, causing a denial-of-s
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from mu
Denial-of-service in Samsung's Escargot JavaScript engine (commit 590345cc) stems from multiple unhandled exceptional co
Excessive memory allocation in Samsung's Escargot JavaScript engine (commit 590345cc) triggers a denial-of-service condi
Denial-of-service via invalid pointer dereference in Samsung Open Source Escargot JavaScript engine affects the specific
Uncontrolled recursion in Samsung's Escargot JavaScript engine crashes the runtime when processing oversized serialized
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.0.0.
Heap-based buffer overflow in Samsung's open-source Escargot JavaScript engine corrupts heap memory when processing mali
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today