This vulnerability involves an out-of-bounds read (CWE-125) in the Samsung Open Source Escargot project, version 97e8115ab1110bc502b4b5e4a0c689a71520d335. An out-of-bounds read occurs when the software reads data outside the boundaries of allocated memory, which in this case leads to resource leak exposure. The vulnerability has a CVSS 3.1 score of 5.9, reflecting medium severity with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation level has been disclosed by Samsung Open Source at this time.

Successful exploitation of this vulnerability could result in unauthorized disclosure of information due to resource leak exposure. The confidentiality impact is high, but there is no impact on integrity and only low impact on availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published by Samsung Open Source, users should monitor vendor communications for updates. Until a patch is available, limiting exposure by controlling access and requiring user interaction may reduce risk given the attack complexity and user interaction requirements.