AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-86315

Samsung Escargot: out-of-bounds write

Samsung

CVE-2026-86315 · Published Sep 7, 2026 · updated Sep 28, 2026

Medium6.2
No fix yet
Samsung advisory

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX.

This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359.

Affected versions

PackageAffectedFixed in
Escargot
Product
<= 5dc93606abd42b859045add05d704a038e197359No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-197

More Samsung advisories

All Samsung
Medium 6.9Sep 9Samsung: improper input validationCVE-2026-21089no fix yetMedium 6.9Sep 9Samsung: improper input validationCVE-2026-21088no fix yetHigh 8.6Sep 9Samsung: out-of-bounds writeCVE-2026-21087no fix yetMedium 4.8Sep 9Samsung ProxyHandler: improper authorizationCVE-2026-21086no fix yetHigh 7.8Sep 7Samsung Walrus: out-of-bounds writeCVE-2026-86313no fix yetMedium 6.2Sep 7Samsung Walrus: integer overflowCVE-2026-86314no fix yet