Lucene search

Samsung.tv_applianceVULNRICHMENT:CVE-2024-32669

HistoryMay 09, 2024 - 6:02 a.m.

CVE-2024-32669 Possible stack overflow due to a string encoding processing error

2024-05-0906:02:53

CWE-125

CWE-787

CWE-20

samsung.tv_appliance

github.com

stack overflow

string encoding error

input validation

vulnerability

samsung

open source

escargot

javascript engine

buffer overflow

test code

release issue

cve-2024-32669

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers.
However, it occurs in the test code and does not include in the release.

This issue affects escargot: 4.0.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "TestCode"
    ],
    "packageName": "JavaScript engine",
    "product": "Escargot",
    "repo": "https://github.com/Samsung/escargot/",
    "vendor": "Samsung Open Source",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      }
    ]
  }
]

References

github.com/Samsung/escargot/pull/1326

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for VULNRICHMENT:CVE-2024-32669