CVE-2026-25204 MEDIUM

CVE-2026-25204

Vendor Samsung Open Source
Product Escargot
Weakness CWE-502 · Unsafe deserialization
Published April 13, 2026
Last update April 14, 2026
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335

Key dates

02Disclosure timeline

April 13, 2026 CVE published
April 14, 2026 Record updated