CVE-2026-25204

MEDIUM

Samsung Open Source Escargot - Denial of Service

Title source: rule

Description

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335

References (1)

https://github.com/Samsung/escargot/pull/1554

Scores

CVSS v3 6.2

EPSS 0.0001

EPSS Percentile 0.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-502 CWE-843

Status published

Products (1)

Samsung Open Source/Escargot 97e8115ab1110bc502b4b5e4a0c689a71520d335

Published Apr 13, 2026

Tracked Since Apr 13, 2026