PT-2026-32258 · Samsung · Open Source Escargot

Published 2026-04-13 · Updated 2026-04-13 · CVE-2026-40446

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Open Source Escargot version 97e8115ab1110bc502b4b5e4a0c689a71520d335

Description A type confusion issue occurs when a resource is accessed using an incompatible type, which enables pointer manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-40446

Affected Products

Open Source Escargot

References · 3

• https://github.com/Samsung/escargot/pull/1554 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-40446 · Security Note
• https://twitter.com/VulmonFeeds/status/2043637456516288878 · Twitter Post