CVE-2026-58307

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Samsung/escargot/issues/1577
https://github.com/Samsung/escargot/pull/1586
https://github.com/Samsung/escargot/issues/1577

Configurations

No configuration.

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Lectura fuera de límites, vulnerabilidad de aserción alcanzable en Samsung Open Source Escargot permite la sobrelectura de búferes, manipulación de datos de entrada. Este problema afecta a Escargot: antes de 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.

Information

Published : 2026-07-09 11:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-58307

Mitre link : CVE-2026-58307

CVE.ORG link : CVE-2026-58307

JSON object : View

Products Affected

No product.

CWE

CWE-125

Out-of-bounds Read

CWE-617

Reachable Assertion

{"id": "CVE-2026-58307", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58307", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-09T12:04:16.935261Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "PSIRT@samsung.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "PSIRT@samsung.com", "affectedData": [{"vendor": "Samsung Open Source", "product": "Escargot", "versions": [{"status": "affected", "version": "0", "lessThan": "2dee22f5c7b8bf31cb7252d7731fae8c07f2842c", "versionType": "git"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-09T11:16:41.550", "references": [{"url": "https://github.com/Samsung/escargot/issues/1577", "source": "PSIRT@samsung.com"}, {"url": "https://github.com/Samsung/escargot/pull/1586", "source": "PSIRT@samsung.com"}, {"url": "https://github.com/Samsung/escargot/issues/1577", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "PSIRT@samsung.com", "description": [{"lang": "en", "value": "CWE-125"}, {"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation.\n\nThis issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c."}, {"lang": "es", "value": "Lectura fuera de l\u00edmites, vulnerabilidad de aserci\u00f3n alcanzable en Samsung Open Source Escargot permite la sobrelectura de b\u00faferes, manipulaci\u00f3n de datos de entrada.\n\nEste problema afecta a Escargot: antes de 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c."}], "lastModified": "2026-10-25T17:10:00.197", "sourceIdentifier": "PSIRT@samsung.com"}