Integer Overflow Vulnerability in Samsung Opensource Escargot
CVE-2026-92259

5.5MEDIUM

Key Information:

Status
Vendor
CVE Published:
15 September 2026

What is CVE-2026-92259?

The vulnerability in Samsung Opensource Escargot stems from an integer overflow or wraparound in its handling of cache files. Attackers with write access to the bytecode-cache directory can exploit this flaw to create specially crafted cache files. This can cause a heap-based buffer overflow, potentially leading to a denial of service condition, disrupting the normal operation of the affected system.

Affected Version(s)

Escargot ac94df78493ee6fede286620d94f724e46b4d238

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ezinne Kalu
.