Integer Overflow Vulnerability in Samsung Open Source Escargot
CVE-2026-40447

5.1MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Escargot
Vendor
CVE Published:
13 April 2026

What is CVE-2026-40447?

An integer overflow vulnerability in Samsung's Open Source Escargot can lead to undefined behavior, potentially enabling attackers to exploit this weakness. This issue specifically affects version 97e8115ab1110bc502b4b5e4a0c689a71520d335 of Escargot, highlighting the necessity for prompt updates and security measures to mitigate risks associated with this flaw.

Affected Version(s)

Escargot 97e8115ab1110bc502b4b5e4a0c689a71520d335

References

https://github.com/Samsung/escargot/pull/1554

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sebastián Alba Vives / @Sebasteuo
.