Lucene search

Samsung.tv_applianceCVELIST:CVE-2024-32669

HistoryMay 09, 2024 - 6:02 a.m.

CVE-2024-32669 Possible stack overflow due to a string encoding processing error

2024-05-0906:02:53

CWE-20

CWE-787

CWE-125

samsung.tv_appliance

www.cve.org

cve-2024-32669

stack overflow

string encoding error

samsung open source

escargot

javascript engine

improper input validation

overflow buffers

vulnerability

test code

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers.
However, it occurs in the test code and does not include in the release.

This issue affects escargot: 4.0.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "TestCode"
    ],
    "packageName": "JavaScript engine",
    "product": "Escargot",
    "repo": "https://github.com/Samsung/escargot/",
    "vendor": "Samsung Open Source",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      }
    ]
  }
]

References

github.com/Samsung/escargot/pull/1326

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-32669