This vulnerability (CVE-2026-47312) in Samsung Open Source Escargot is classified as CWE-763, which involves the release of an invalid pointer or reference. This can cause buffer manipulation issues potentially leading to denial of service or application instability. The vulnerability affects a specific version of Escargot identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. The CVSS 3.1 base score is 5.5, with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability. There is no vendor advisory or patch information provided, and no known exploits in the wild.

The impact is limited to availability, meaning successful exploitation could cause a denial of service or crash of the Escargot component. There is no confidentiality or integrity impact reported. The vulnerability requires local access and user interaction, which reduces the likelihood of remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor Samsung Open Source advisories for updates. Until a patch is available, minimizing local access to affected versions and avoiding untrusted input that could trigger the vulnerability may reduce risk.