Vulnerability · Published Sep 7, 2026 · Assigned by samsung.tv_appliance

CVE-2026-86315

Medium 6.2

In plain English

A medium-severity security flaw in Escargot from Samsung Opensource. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)6.2Medium

Exploit odds (30 days)0.2%top 93.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359.

Affected products (as reported)

Vendor	Product	Versions
Samsung Opensource	Escargot	5dc93606abd42b859045add05d704a038e197359

Weakness: CWE-197 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/Samsung/escargot/pull/1660