CVE-2026-25205

Published: Apr 13, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335 .

Affected (1)

Products: Samsung: Escargot

Samsung

1 product

Escargot

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung Escargot	Version 2026-03-26

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://github.com/Samsung/escargot/pull/1554

Source: PSIRT@samsung.com

Issue Tracking

Timeline

No history available yet.