This vulnerability is a heap-based buffer overflow (CWE-122) in the Samsung Open Source Escargot project, specifically affecting the commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335. The flaw allows out-of-bounds writes on the heap, which can corrupt memory and potentially lead to code execution or denial of service. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and no privileges or user interaction, but it impacts confidentiality, integrity, and availability with a scope change. No patch or official fix has been documented as of the publication date.

The vulnerability can lead to memory corruption through heap-based buffer overflow, impacting confidentiality (partial data disclosure), integrity (high impact), and availability (high impact). Exploitation requires local access and is complex, but successful exploitation could allow an attacker to execute arbitrary code or cause a denial of service. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is documented, users should monitor Samsung Open Source advisories for updates. Until a patch is available, limit local access to trusted users and consider additional local security controls to mitigate risk.