CVE-2026-58307

Published: Jul 9, 2026Modified: Jul 9, 2026Deferred

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Exploitability: 1.8 / Impact: 4.2

Source: PSIRT@samsung.com (Secondary)

Description

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (3)

https://github.com/Samsung/escargot/issues/1577

Source: PSIRT@samsung.com

https://github.com/Samsung/escargot/pull/1586

Source: PSIRT@samsung.com

https://github.com/Samsung/escargot/issues/1577

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.