This vulnerability in Samsung Open Source Escargot arises from a type confusion issue where a resource is accessed using an incompatible type, enabling pointer manipulation. The flaw is tracked as CWE-843 and affects the Escargot version identified by commit 97e8115ab1110bc502b4b5e4a0c689a71520d335. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, no privileges, and user interaction. The impact affects integrity and availability significantly, while confidentiality impact is low. No vendor advisory or patch information is currently available.

The vulnerability allows an attacker with local access and user interaction to manipulate pointers due to type confusion, potentially leading to high integrity and availability impacts such as unauthorized modification or disruption of the affected system. Confidentiality impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor Samsung Open Source advisories for updates. Until a patch is released, limiting local access and reducing user interaction with the vulnerable component may reduce risk.