Samsung Escargot JavaScript engine out-of-bounds write allows buffer overflow at affected commit

Last refreshed2026-09-30

Status: UPDATED | Advisory ID: CVE-2026-25207

Key Details

CVE	CVE-2026-25207
CVSS Score / Version	7.4 (High) / CVSS v3.1
Updated	2026-06-17
CVSS Vector	`CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Samsung escargot
Classified as	CWE-787 (Out-of-bounds Write)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Samsung	escargot

Vendor

Product

Affected Versions

Patch Status

Samsung

escargot

Subsystems	General OT
Sectors	Multiple

What to Know

Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

What to Do

Monitor Samsung's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-25207
CVE	https://www.cve.org/CVERecord?id=CVE-2026-25207

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-25207

CVE