CVE-2026-14160
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A Time-of-check time-of-use (TOCTOU) race condition vulnerability has been discovered in Samsung Open Source Escargot. This flaw allows leveraging race conditions to compromise data integrity.
Risk Assessment
An attacker can exploit the time window between resource check and use, potentially leading to unauthorized access or data modification in systems using Escargot.
Recommendation
Immediately update the Escargot library to a patched version or apply a workaround by synchronizing access to shared resources.
Other vulnerabilities in Escargot
See all- CVE-2026-58307Medium
An out-of-bounds read and reachable assertion vulnerability in Samsung Open Source Escargot allows overread buffers and input data manipulation.
- CVE-2026-58306Medium
A heap-based buffer overflow vulnerability has been discovered in Samsung Open Source Escargot. The issue affects versions prior to commit ef525f337fafddecde77a3c426212a84bb20cb98.
- CVE-2026-58305Medium
A type confusion vulnerability in Samsung's Escargot JavaScript engine allows pointer manipulation. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.
- CVE-2026-58304Medium
An out-of-bounds read and write vulnerability has been discovered in Samsung Open Source Escargot, leading to buffer overflows. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.
- CVE-2026-58303Medium
A stack-based buffer overflow vulnerability has been discovered in Samsung's Escargot JavaScript engine. The issue affects versions prior to commit b30b63fc63b403907d8137da1c65aaa4521fe74e.
- CVE-2026-47317Medium
Samsung Open Source Escargot is vulnerable to uncontrolled recursion leading to excessive memory allocation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47316Medium
Samsung Open Source Escargot is vulnerable to improper check or handling of exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47315Medium
Samsung Open Source Escargot is vulnerable to improper check for unusual or exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47314High
In Samsung Open Source Escargot (commit 590345cc), an out-of-bounds write vulnerability exists that can lead to buffer overflows.
- CVE-2026-47313Medium
Samsung Open Source Escargot is vulnerable to memory allocation with excessive size value, leading to excessive allocation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
Original NVD description (English source)
Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. This issue affects Escargot: bab3a5797557014ce3c2e28419a6310cfba90d0d.