Threat database

CVE-2026-110934 is an improper validation of array index vulnerability in Samsung Open Source Vyond. It allows input data manipulation that can lead to denial of service. The vulnerability affects version 0 of Vyond. The CVSS score is 4.4 (medium severity), indicating limited impact on confidentiality and integrity but high impact on availability. No patch or remediation information is currently provided.

An uncaught exception vulnerability (CWE-248) exists in Samsung Open Source Vyond before commit fb10a5c8b833df7f152d4a563a61d6090a1790d7. This flaw allows input data manipulation and results in a denial of service due to application crashes. The vulnerability has a CVSS 3.1 base score of 4.4 (medium severity).

CVE-2026-110392 is a critical OS command injection vulnerability in Samsung Open Source QA-Board. It involves improper neutralization of special elements used in OS commands, allowing an attacker to execute arbitrary commands on the affected system. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided. No known exploits are reported in the wild.

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers.

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e.

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a.

CVE-2026-82797 is an uncontrolled recursion vulnerability in the Samsung Open Source rlottie library. It is triggered by serialized data containing nested payloads that cause excessive recursion, impacting availability. The vulnerability has a medium severity with a CVSS score of 5.5. It affects versions of rlottie before commit 8de0d9e6ca80ffef654965505981727b9fa06a51. No official patch or remediation guidance is currently available, and there are no known exploits in the wild.

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.