CVE-2026-25204

6.2 MEDIUM

Published: April 13, 2026 Modified: April 13, 2026

Description

Deserialization of untrusted data vulnerability in Samsung Open Source Escarogt Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://github.com/Samsung/escargot/pull/1554

Source: PSIRT@samsung.com

1 reference(s) from NVD

Quick Stats

CVSS v3 Score

6.2 / 10.0

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-502 CWE-843

Related CVEs