CVE-2026-58307 | Out-of-bounds read, Reachable assertion vulnerability in Sam… | CVSS 6.1 MEDIUM

Description

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c.

Metadata

CVE ID: CVE-2026-58307
State: PUBLISHED
Assigner: samsung.tv_appliance
Reserved: 2026-06-30 01:49 UTC
Published: 2026-07-09 10:33 UTC
Last updated: 2026-07-09 12:04 UTC
Primary CWE: CWE-125
CWE-125 Out-of-bounds read
Vendor / Product: Samsung Open Source / Escargot
Sources: cve.org · NVD

Severity & Metrics

6.1 MEDIUM CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
Samsung Open Source	Escargot	—	0 < 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c

Weakness (CWE)

CWE	Source	Description
CWE-125	cna	CWE-125 Out-of-bounds read
CWE-617	cna	CWE-617 Reachable assertion

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.1	MEDIUM	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

References (2)