Threat database

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.

Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b4708b84a.

Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b4708b84a.

Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before b30b63fc63b403907d8137da1c65aaa4521fe74e.

Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. This issue affects Escargot: bab3a5797557014ce3c2e28419a6310cfba90d0d.

CVE-2026-8916 is an out-of-bounds write vulnerability in the Samsung Open Source rlottie library that can lead to buffer overflow conditions. It affects versions before commit dcfde72eae1b0464dc0dd760aec00ada6a148635. The vulnerability requires local access with low attack complexity and user interaction. It has a CVSS 3.1 base score of 6.1, indicating medium severity. The impact includes integrity loss and high availability impact. No official patch or remediation guidance is currently available from the vendor.

Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before ce72b35a7ad0dded03051d3aa0ef75321c3bd035.

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f.

Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.

Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.

CVE-2026-47317 is an uncontrolled recursion vulnerability in Samsung Open Source Escargot that can lead to excessive memory allocation. The vulnerability affects a specific version of Escargot identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. It has a medium severity rating with a CVSS score of 5.5, indicating a moderate impact primarily on availability. There is no vendor-provided patch or official remediation guidance available at this time. No known exploits are reported in the wild. The vulnerability requires local access with user interaction to be triggered. No confidentiality or integrity impacts are noted.

CVE-2026-47316 is a medium severity vulnerability in Samsung Open Source Escargot caused by improper check or handling of exceptional conditions, which allows input data manipulation. It affects a specific version of Escargot identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability does not impact confidentiality or integrity but can cause availability issues. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.

CVE-2026-47315 is a medium severity vulnerability in Samsung Open Source Escargot caused by improper checking for unusual or exceptional conditions. This flaw allows input data manipulation but does not impact confidentiality or integrity, only availability. It affects a specific Escargot version identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. No official patch or remediation guidance is currently available, and no known exploits exist in the wild.

CVE-2026-47314 is an out-of-bounds write vulnerability in Samsung Open Source Escargot that can cause buffer overflow conditions. It affects a specific version of Escargot identified by the commit hash 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-47313 is a medium severity vulnerability in Samsung Open Source Escargot involving memory allocation with an excessive size value. This flaw can lead to excessive memory allocation, potentially causing denial of service due to resource exhaustion. The vulnerability affects the specific Escargot version identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. There is no official patch or remediation level provided by the vendor at this time, and no known exploits are reported in the wild. The vulnerability requires local access with low privileges and user interaction to trigger, and it does not impact confidentiality or integrity but affects availability.

CVE-2026-47312 is a medium severity vulnerability in Samsung Open Source Escargot involving the release of an invalid pointer or reference, which can lead to buffer manipulation. The affected version is identified by a specific commit hash. The vulnerability has a CVSS score of 5.5, indicating a moderate impact primarily on availability. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild.

CVE-2026-47311 is a heap-based buffer overflow vulnerability in Samsung Open Source Escargot, specifically affecting version 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability has a high severity with a CVSS score of 7.8, indicating it can lead to high impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild. The vulnerability requires local access with low attack complexity and user interaction. No geographic targeting is indicated.