Use After Free Vulnerability in Samsung Open Source Escargot
CVE-2026-124684

5.1MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Escargot
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124684?

A use after free vulnerability exists in Samsung's Open Source Escargot, allowing for potential pointer manipulation. This vulnerability could enable an attacker to exploit the memory management errors, potentially leading to unauthorized access or control over the affected system. It is crucial for users to update to the latest version to mitigate any risks associated with this security flaw.

Affected Version(s)

Escargot 0 < 8bc35b7b88f0f96c66a42aa965a1a710308b61d5

References

https://github.com/Samsung/escargot/commit/8bc35b7b88f0f9...

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.