CVE Intelligence
Analysis AI-assisted

CVE-2026-25209: Samsung Escargot Out-of-Bounds Read with Resource Leak Exposure

CVE-2026-25209 is an out-of-bounds read (CWE-125) in Samsung Open Source Escargot that the record describes as allowing resource leak exposure. The NVD base score is 9.1, while Samsung PSIRT and the CNA list 6.5. The sources consulted show no KEV listing and no confirmed exploitation.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-25209 is an out-of-bounds read classified as CWE-125 in Samsung Open Source Escargot. The record describes the effect as resource leak exposure. The NVD entry carries a base score of 9.1, while Samsung PSIRT and the CNA list 6.5.

Impact

  • The record names resource leak exposure as the effect, but the specific data exposed is not described in the sources consulted.
  • The NVD vector indicates high confidentiality and availability impact and no integrity impact. This reading is an inference from the vector.
  • The lower Samsung score suggests a different severity assessment, and the reasons are not stated.

Affected products and versions

  • Samsung Escargot: version 2026-03-26.
  • Samsung Open Source Escargot: version 97e8115ab1110bc502b4b5e4a0c689a71520d335, which is listed as a commit identifier.

The record does not state a fixed version. A patch reference points to pull request 1554 in the Samsung Escargot repository. Whether that change is included in a released version is unknown.

Exploitation status

The CISA KEV data in the record does not list this CVE. No confirmed exploitation appears in the sources consulted. The SSVC fields in the record list exploitation as none and automatable as no.

Remediation and mitigation

  • Identify whether your products embed Samsung Open Source Escargot, including the builds listed above.
  • Review the upstream patch in pull request 1554 and apply it in a tested build, or obtain a vendor update when one is available.
  • Limit exposure of the affected component to untrusted input until a fix is deployed, based on your own risk assessment.

Detection guidance

  • Keep an inventory of software builds that include the listed Escargot identifiers.
  • Monitor services that embed the engine for unexpected crashes, memory anomalies or growing resource consumption.

Limitations of the available information

  • No fixed release version is stated in the record.
  • The specific leaked data and any preconditions for exploitation are not described.
  • The EPSS date in the record is later than the publication date and should be verified against the original source.
  • Sources consulted: NVD entry, CVE record, patch pull request.

Frequently asked questions

What is CVE-2026-25209?

It is an out-of-bounds read (CWE-125) in Samsung Open Source Escargot that the record says allows resource leak exposure.

Is this CVE being actively exploited?

The CISA KEV data in the record does not list it, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.