Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads.
This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.
CVE-2026-47317 is an uncontrolled recursion vulnerability in Samsung Open Source Escargot that can lead to excessive memory allocation. The vulnerability affects a specific version of Escargot identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. It has a medium severity rating with a CVSS score of 5.5, indicating a moderate impact primarily on availability. There is no vendor-provided patch or official remediation guidance available at this time. No known exploits are reported in the wild. The vulnerability requires local access with user interaction to be triggered. No confidentiality or integrity impacts are noted.
CVE-2026-47316 is a medium severity vulnerability in Samsung Open Source Escargot caused by improper check or handling of exceptional conditions, which allows input data manipulation. It affects a specific version of Escargot identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability does not impact confidentiality or integrity but can cause availability issues. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.
CVE-2026-47315 is a medium severity vulnerability in Samsung Open Source Escargot caused by improper checking for unusual or exceptional conditions. This flaw allows input data manipulation but does not impact confidentiality or integrity, only availability. It affects a specific Escargot version identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. No official patch or remediation guidance is currently available, and no known exploits exist in the wild.
CVE-2026-47314 is an out-of-bounds write vulnerability in Samsung Open Source Escargot that can cause buffer overflow conditions. It affects a specific version of Escargot identified by the commit hash 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-47313 is a medium severity vulnerability in Samsung Open Source Escargot involving memory allocation with an excessive size value. This flaw can lead to excessive memory allocation, potentially causing denial of service due to resource exhaustion. The vulnerability affects the specific Escargot version identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. There is no official patch or remediation level provided by the vendor at this time, and no known exploits are reported in the wild. The vulnerability requires local access with low privileges and user interaction to trigger, and it does not impact confidentiality or integrity but affects availability.
CVE-2026-47312 is a medium severity vulnerability in Samsung Open Source Escargot involving the release of an invalid pointer or reference, which can lead to buffer manipulation. The affected version is identified by a specific commit hash. The vulnerability has a CVSS score of 5.5, indicating a moderate impact primarily on availability. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild.
CVE-2026-47311 is a heap-based buffer overflow vulnerability in Samsung Open Source Escargot, specifically affecting version 590345cc6258317c5da850d846ce6baaf2afc2d3. The vulnerability has a high severity with a CVSS score of 7.8, indicating it can lead to high impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild. The vulnerability requires local access with low attack complexity and user interaction. No geographic targeting is indicated.
CVE-2026-47310 is a use-after-free vulnerability in Samsung Open Source Escargot that allows pointer manipulation. The affected version is identified by the commit hash 590345cc6258317c5da850d846ce6baaf2afc2d3. This vulnerability has a high severity with a CVSS score of 7.8, indicating it can lead to high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available, and there are no known exploits in the wild at this time.
CVE-2026-47309 is an uncontrolled recursion vulnerability in Samsung Open Source Escargot that allows oversized serialized data payloads. This flaw can cause a denial of service by exhausting system resources due to recursive processing. The vulnerability affects a specific Escargot version identified by commit 590345cc6258317c5da850d846ce6baaf2afc2d3. There is no official patch or remediation level provided at this time. The CVSS score is 5.5, indicating a medium severity impact focused on availability. No known exploits are reported in the wild, and the product is not a cloud service. No geographic targeting is indicated.
CVE-2026-47308 is a NULL pointer dereference vulnerability in the Samsung Open Source Walrus project. This flaw allows pointer manipulation which can lead to a denial of service condition. The vulnerability affects a specific version of Walrus identified by commit f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9. The CVSS 3.1 base score is 5.5, indicating a medium severity impact primarily due to availability disruption. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild. The vulnerability requires local access with low attack complexity and no privileges, but user interaction is needed. The impact does not include confidentiality or integrity loss, only availability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-47307 is a NULL pointer dereference vulnerability in Samsung Open Source Walrus. It allows an attacker to cause a denial of service by supplying a crafted WebAssembly module with deeply nested instructions. The vulnerability affects a specific version of Walrus identified by commit f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9. There is no known exploit in the wild and no official patch or remediation guidance has been provided yet. The CVSS score is 5.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-21019 is a high-severity vulnerability affecting Samsung Mobile Devices, specifically in the FacAtFunction component of Galaxy Watch models prior to the SMR May-2026 Release 1. It involves improper input validation that allows a local attacker to execute arbitrary code with system privileges. The vulnerability has a CVSS 4.0 base score of 8.9, indicating a significant risk. There is no official patch or remediation level confirmed yet, and no known exploits in the wild have been reported. The vendor has not provided explicit guidance or a fix at this time.
CVE-2026-21018 is an out-of-bounds write vulnerability in the SveService component of Samsung Mobile Devices prior to the SMR May-2026 Release 1. This flaw allows local attackers with privileged access to execute arbitrary code. The vulnerability has a CVSS 4.0 base score of 6.8, indicating a medium severity level. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.