CVEsSamsung Open SourceCVE-2026-58306Published Jul 9, 09:56 · Updated Jul 9, 12:10 UTC
6.1
MediumCVSS 3.1 · from samsung.tv_appliance
CVE-2026-58306

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.

Escargot · Heap buffer overflow · CWE-122
AffectedEscargot
FixNo fix listed yet.
PublishedJul 9, 09:56 · samsung.tv_appliance
ScoredJul 9 · 6.1 · samsung.tv_appliance
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC

What we know

No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can take the service down. CVSS impact.

Description

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98.

From samsung.tv_appliance

Affected and fixed versions

ProductAffectedFixed inEscargotbefore ef525f337fafddecde77a3c426212a84bb20cb98–

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

github.com/Samsung/escargot/issues/1576 · github.comgithub.com/Samsung/escargot/pull/1584 · github.com

Other CVEs in Escargot

All 29 →
5.4Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. · CVE-2026-118435Oct 286.1Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. · CVE-2026-58307Jul 96.1Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. · CVE-2026-58305Jul 9