CVE-2026-86315
Received Received - Intake

Out-of-Bounds Write in Samsung Open Source Escargot

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: Samsung TV & Appliance

Description
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-86315
EUVD
EUVD-2026-72246

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung escargot *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-197 Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds write caused by numeric truncation in Samsung Open Source Escargot on Linux x86-64. An attacker can supply JavaScript for execution to corrupt native memory and crash the host process by crafting a class definition where the instance initialization entry count exceeds UINT16_MAX.

Detection Guidance

This vulnerability is specific to Samsung's Escargot JavaScript engine and requires detecting out-of-bounds writes caused by numeric truncation in crafted class definitions. Monitor for crashes in Escargot processes and check for memory corruption patterns. Use tools like AddressSanitizer (ASan) or Valgrind to detect memory corruption during JavaScript execution.

Impact Analysis

This vulnerability could allow an attacker to corrupt memory and crash the process running Escargot. This may lead to denial of service or potentially enable further exploitation if combined with other vulnerabilities.

Compliance Impact

The vulnerability involves an out-of-bounds write due to numeric truncation in Samsung Open Source Escargot, which could allow memory corruption and process crashes via crafted JavaScript. This type of memory corruption issue may lead to unauthorized code execution or data leaks, which could impact compliance with data protection regulations like GDPR (General Data Protection Regulation) and HIPAA (Health Insurance Portability and Accountability Act) by potentially exposing sensitive user data or violating integrity requirements.

Mitigation Strategies

Update Escargot to the latest patched version to address the out-of-bounds write vulnerability caused by numeric truncation. Monitor Samsung's official repositories or security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86315. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart