This vulnerability in Samsung Open Source Escargot is classified as CWE-125 (Out-of-bounds Read) and CWE-617 (Reachable Assertion). It allows an attacker to cause buffer overread and manipulate input data by triggering an out-of-bounds read condition. The affected versions are all versions before the commit 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c. The CVSS 3.1 vector indicates that the attack requires local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), scope unchanged (S:U), no confidentiality impact (C:N), low integrity impact (I:L), and high availability impact (A:H). There is no vendor advisory or patch information available at this time.

The vulnerability can lead to buffer overread and input data manipulation, potentially causing denial of service or application instability due to the high impact on availability. There is no confidentiality impact, and integrity impact is low. Exploitation requires local access and user interaction, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently provided, users should monitor vendor communications for updates. Restricting local access and limiting user interaction with the vulnerable component may reduce risk until a patch is available.