CVE-2026-86315
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An out-of-bounds write caused by numeric truncation in Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. Affects version 5dc93606abd42b859045add05d704a038e197359.
Risk Assessment
May lead to process crash or potentially remote code execution, posing a serious security threat.
Recommendation
Update Escargot to the latest version containing the fix.
Other vulnerabilities in Escargot
See all- CVE-2026-58307Medium
An out-of-bounds read and reachable assertion vulnerability in Samsung Open Source Escargot allows overread buffers and input data manipulation.
- CVE-2026-58306Medium
A heap-based buffer overflow vulnerability has been discovered in Samsung Open Source Escargot. The issue affects versions prior to commit ef525f337fafddecde77a3c426212a84bb20cb98.
- CVE-2026-58305Medium
A type confusion vulnerability in Samsung's Escargot JavaScript engine allows pointer manipulation. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.
- CVE-2026-58304Medium
An out-of-bounds read and write vulnerability has been discovered in Samsung Open Source Escargot, leading to buffer overflows. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.
- CVE-2026-58303Medium
A stack-based buffer overflow vulnerability has been discovered in Samsung's Escargot JavaScript engine. The issue affects versions prior to commit b30b63fc63b403907d8137da1c65aaa4521fe74e.
- CVE-2026-14160Medium
A Time-of-check time-of-use (TOCTOU) race condition vulnerability has been discovered in Samsung Open Source Escargot. This flaw allows leveraging race conditions to compromise data integrity.
- CVE-2026-47317Medium
Samsung Open Source Escargot is vulnerable to uncontrolled recursion leading to excessive memory allocation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47316Medium
Samsung Open Source Escargot is vulnerable to improper check or handling of exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47315Medium
Samsung Open Source Escargot is vulnerable to improper check for unusual or exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.
- CVE-2026-47314High
In Samsung Open Source Escargot (commit 590345cc), an out-of-bounds write vulnerability exists that can lead to buffer overflows.
Original NVD description (English source)
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359.