CVE-2026-47307
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. The issue affects a specific commit of the repository.
Risk Assessment
An attacker can remotely crash the system, resulting in service disruption for users.
Recommendation
Update Walrus to a patched version or apply available security fixes.
Other vulnerabilities in Walrus
See all- CVE-2026-86313High
Out-of-bounds write vulnerability in Samsung Opensource Walrus, allowing buffer overflows. Affects version af80e665ea49d9003695a66502f841ed1d8397e7.
- CVE-2026-47308Medium
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. The issue affects a specific commit in the Walrus repository.
Original NVD description (English source)
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.