CVE-2026-86313: CWE-787 Out-of-bounds write in Samsung Opensource Walrus

CVE-2026-86313 is a CWE-787 out-of-bounds write vulnerability in the Samsung Opensource Walrus project. This vulnerability allows writing outside the intended buffer boundaries, potentially causing buffer overflow. The CVSS 3.1 vector indicates the attack requires local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), and impacts confidentiality, integrity, and availability with high severity (C:H/I:H/A:H). The issue affects the Walrus version identified by commit af80e665ea49d9003695a66502f841ed1d8397e7. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system's confidentiality, integrity, and availability due to buffer overflow caused by out-of-bounds write. The attack requires local access and user interaction but no privileges, making it a significant risk in environments where users can execute code locally.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit local user access and avoid executing untrusted code in the Walrus environment. Monitor for vendor updates regarding patches or official mitigations.