CVE-2026-49509
Received Received - Intake

Out-of-Bounds Read in Samsung Opensource Escargot

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: Samsung TV & Appliance

Description
Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This issue affects Escargot: 25648aef19187b3f87f4d9420b8d761453ad4630.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-49509
EUVD
EUVD-2026-70848

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
samsung escargot *
samsung rlottie to 2.27 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds read vulnerability in Samsung Opensource Escargot that allows overreading buffers. It affects the Escargot component identified by the commit hash 25648aef19187b3f87f4d9420b8d761453ad4630.

Impact Analysis

An attacker could exploit this to read memory outside intended boundaries, potentially accessing sensitive data or causing crashes. The CVSS score indicates low impact on confidentiality and availability with local access required.

Compliance Impact

The provided CVE data does not specify direct implications for compliance with standards like GDPR or HIPAA. The vulnerability involves an out-of-bounds read in Samsung Opensource Escargot, which could potentially lead to information disclosure but lacks details on data sensitivity or regulatory impact.

Mitigation Strategies

Update the Samsung rlottie library to the latest version that includes the fix from stb version 2.27. Monitor the Samsung/rlottie repository for updates and apply patches promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49509. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart