Heap-Based Buffer Overflow in Samsung Open Source Escargot
CVE-2026-58306

6.1MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Escargot
Vendor
CVE Published:
9 July 2026

What is CVE-2026-58306?

A heap-based buffer overflow vulnerability in Samsung's Open Source Escargot can lead to potential overflow of memory buffers. This flaw affects versions of Escargot prior to the commit ef525f337fafddecde77a3c426212a84bb20cb98, enabling attackers to manipulate memory in an unauthorized manner, which may allow arbitrary code execution or a denial of service.

Affected Version(s)

Escargot 0

References

https://github.com/Samsung/escargot/issues/1576
https://github.com/Samsung/escargot/pull/1584

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Name: Francesco Lucarini
.