CVE-2026-86315

Summary

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX.

This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359.

Affected Software

VendorProductVersion RangeStatus
Samsung OpensourceEscargot5dc93606abd42b859045add05d704a038e197359affected

Weaknesses

  • CWE-197: CWE-197 Numeric truncation error

References