6.1
MediumCVSS 3.1 · from samsung.tv_appliance
CVE-2026-58307
Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation.
Escargot · Out-of-bounds read · CWE-125AffectedEscargot
FixUpdate to 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c or newer
PublishedJul 9, 10:33 · samsung.tv_appliance
ScoredJul 9 · 6.1 · samsung.tv_appliance
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can take the service down. CVSS impact.
Description
Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.
From samsung.tv_appliance
Affected and fixed versions
ProductAffectedFixed inEscargotbefore 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c2dee22f5c7b8bf31cb7252d7731fae8c07f2842c
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known