Type Confusion Vulnerability in Samsung Escargot Framework
CVE-2026-58305

6.1MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Escargot
Vendor
CVE Published:
9 July 2026

What is CVE-2026-58305?

A type confusion vulnerability in the Samsung Escargot framework allows for pointer manipulation, potentially leading to unauthorized access to sensitive resources. This flaw affects multiple versions of the Escargot framework, specifically those prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a. Exploitation of this vulnerability could result in significant security risks if left unaddressed.

Affected Version(s)

Escargot 0 < 779f6bedf58f334dec64b0a51ebb724b4708b84a

References

https://github.com/Samsung/escargot/issues/1574
https://github.com/Samsung/escargot/pull/1580

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Name: Francesco Lucarini
.