CVE-2026-47308

MediumCVSS 5.5

Published: 19/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. The issue affects a specific commit in the Walrus repository.

Risk Assessment

An attacker could exploit this vulnerability to cause a system crash or potentially execute arbitrary code, threatening system availability and integrity.

Recommendation

It is recommended to immediately update to a newer version of Walrus that includes a fix for this issue.

Other vulnerabilities in Walrus

See all

CVE-2026-86313High
Out-of-bounds write vulnerability in Samsung Opensource Walrus, allowing buffer overflows. Affects version af80e665ea49d9003695a66502f841ed1d8397e7.
CVE-2026-47307Medium
A NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. The issue affects a specific commit of the repository.

Original NVD description (English source)

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.