5.4
MediumCVSS 3.1 · from samsung.tv_appliance
CVE-2026-118435
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.
escargot · Out-of-bounds write · CWE-787Affectedescargot
FixUpdate to 09db346 or newer
PublishedOct 28, 07:49 · samsung.tv_appliance
ScoredOct 28 · 5.4 · samsung.tv_appliance
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
Someone has to open, click or run something first. CVSS: user interaction required.
Description
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.
From samsung.tv_appliance
Affected and fixed versions
ProductAffectedFixed inescargotNot affected09db346
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known