Samsung Escargot JavaScript engine integer overflow allows buffer overflow at affected commit

Last refreshed2026-09-30

Status: UPDATED | Advisory ID: CVE-2026-25208

Key Details

CVE	CVE-2026-25208
CVSS Score / Version	8.1 (High) / CVSS v3.1
Updated	2026-06-17
CVSS Vector	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Samsung escargot
Classified as	CWE-190 (Integer Overflow or Wraparound)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Samsung	escargot

Vendor

Product

Affected Versions

Patch Status

Samsung

escargot

Subsystems	General OT
Sectors	Multiple

What to Know

Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

What to Do

Monitor Samsung's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-25208
CVE	https://www.cve.org/CVERecord?id=CVE-2026-25208

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-25208

CVE