CVE-2026-92259
Description
A flaw was found in Samsung Opensource Escargot. This integer overflow or wraparound vulnerability allows a local attacker, with write access to the bytecode-cache directory, to create a specially crafted cache file. This can lead to a heap-based buffer overflow, resulting in a denial of service.
Statement
This vulnerability is evaluated with Moderate severity because exploitation demands prior local write privileges to the bytecode cache directory and is limited to inducing an application crash without breaching confidentiality or data integrity. Samsung Opensource Escargot is not packaged, deployed, or supported in Red Hat Enterprise Linux or any other Red Hat product line. Therefore, this issue presents no operational risk to supported Red Hat environments.
Understanding the Weakness (CWE)
Integrity,Availability,Confidentiality
Technical Impact: DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands; Read Memory; Modify Memory
If the incorrect calculation is used in the context of memory allocation, then the software may create a buffer that is smaller or larger than expected. If the allocated buffer is smaller than expected, this could lead to an out-of-bounds read or write (CWE-119), possibly causing a crash, allowing arbitrary code execution, or exposing sensitive data.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
