Out-of-Bounds Read Vulnerability in Samsung Opensource Escargot
CVE-2026-49509

4.4MEDIUM

Key Information:

Vendor

Samsung Opensource

Status
Escargot
Vendor
CVE Published:
3 September 2026

What is CVE-2026-49509?

The vulnerability in Samsung Opensource Escargot allows for an out-of-bounds read, potentially leading to sensitive data exposure. This issue may permit attackers to read data beyond the intended buffer limits, resulting in unpredictable behavior or application crashes. To mitigate risks, users and developers should ensure they apply the latest patches and monitor for any unusual activity related to their installations.

Affected Version(s)

Escargot 25648aef19187b3f87f4d9420b8d761453ad4630

References

https://github.com/Samsung/rlottie/pull/604

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alifia Rahmah
.