CVE-2026-47309

Analyzed Analyzed - Analysis Complete

Uncontrolled Recursion in Samsung Open Source Escargot

Publication date: 2026-05-19

Last updated on: 2026-06-02

Assigner: Samsung TV & Appliance

Description

Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-19

Last Modified

2026-06-02

Generated

2026-06-30

AI Q&A

2026-05-19

EPSS Evaluated

2026-06-28

NVD

CVE-2026-47309

EUVD

EUVD-2026-30839

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	escargot	2026-05-14

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-674	The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Attack-Flow Graph

Executive Summary

The vulnerability is an Uncontrolled Recursion issue in Samsung Open Source Escargot that allows oversized serialized data payloads. This means that the software does not properly control recursive calls when processing serialized data, which can lead to problems such as crashes.

Impact Analysis

This vulnerability can cause denial of service by crashing the affected software. Since the vulnerability allows oversized serialized data payloads to trigger uncontrolled recursion, it can lead to application instability or unavailability.

Mitigation Strategies

To mitigate the Uncontrolled Recursion vulnerability in Samsung Open Source Escargot, you should update Escargot to the fixed version that addresses the crash issues caused by oversized serialized data payloads.

Refer to the official Samsung Escargot repository pull request #1565 which contains the fix for this vulnerability.

Compliance Impact

The provided information does not specify any impact of the vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-47309. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70