OpenCVE

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Samsung Open Source	Escargot

No data.

No data.

References

Link	Providers
https://github.com/Samsung/escargot/issues/1576
https://github.com/Samsung/escargot/pull/1584

History

Mon, 13 Jul 2026 21:00:00 +0000

Type	Values Removed	Values Added
Title		Heap-based Buffer Overflow in Samsung Escargot via Unvalidated Input

Sun, 12 Jul 2026 07:15:00 +0000

Type	Values Removed	Values Added
Title	Heap-based Buffer Overflow in Escargot

Fri, 10 Jul 2026 14:00:00 +0000

Type	Values Removed	Values Added
Title		Heap-based Buffer Overflow in Escargot

Thu, 09 Jul 2026 12:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 09 Jul 2026 11:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Samsung Open Source Samsung Open Source escargot
Vendors & Products		Samsung Open Source Samsung Open Source escargot

Thu, 09 Jul 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.
Weaknesses		CWE-122
References		https://github.com/Samsung/escargot/issues/1576 https://github.com/Samsung/escargot/pull/1584
Metrics		cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H'}`

MITRE

Status: PUBLISHED

Assigner: samsung.tv_appliance

Published: 2026-07-09T09:56:20.576Z

Updated: 2026-07-09T12:10:29.268Z

Reserved: 2026-06-30T01:49:44.822Z

Link: CVE-2026-58306

Vulnrichment

Updated: 2026-07-09T12:10:23.017Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58306", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-06-30T01:49:44.822Z", "datePublished": "2026-07-09T09:56:20.576Z", "dateUpdated": "2026-07-09T12:10:29.268Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-07-09T09:56:20.576Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-122", "description": "CWE-122 Heap-based buffer overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "Escargot", "versions": [{"status": "affected", "version": "0", "lessThan": "ef525f337fafddecde77a3c426212a84bb20cb98", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.\n\nThis issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.<p>This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.</p>"}]}], "references": [{"url": "https://github.com/Samsung/escargot/issues/1576"}, {"url": "https://github.com/Samsung/escargot/pull/1584"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"}}], "credits": [{"lang": "en", "value": "Name: Francesco Lucarini", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-09T12:10:14.144470Z", "id": "CVE-2026-58306", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T12:10:29.268Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58306", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-06-30T01:49:44.822Z", "datePublished": "2026-07-09T09:56:20.576Z", "dateUpdated": "2026-07-09T12:10:29.268Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-07-09T09:56:20.576Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-122", "description": "CWE-122 Heap-based buffer overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Samsung Open Source", "product": "Escargot", "versions": [{"status": "affected", "version": "0", "lessThan": "ef525f337fafddecde77a3c426212a84bb20cb98", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.\n\nThis issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.<p>This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.</p>"}]}], "references": [{"url": "https://github.com/Samsung/escargot/issues/1576"}, {"url": "https://github.com/Samsung/escargot/pull/1584"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H"}}], "credits": [{"lang": "en", "value": "Name: Francesco Lucarini", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-58306", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-09T12:10:14.144470Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T12:10:23.017Z"}}]}}