{"id":"CVE-2026-92259","title":"Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file.\n\nThis is…","summary":"Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file.\n\nThis is…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"vendor":"Samsung Opensource","product":"Escargot","affected":["Escargot ac94df78493ee6fede286620d94f724e46b4d238"],"published":"2026-09-15","updated":"2026-09-18","sourceUpdated":"2026-09-18T19:29:56.010","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92259","references":[{"url":"https://github.com/Samsung/escargot/pull/1650","label":"PSIRT@samsung.com"}],"tags":["nvd","cve.org"],"epss":0.00166,"epssPercentile":0.06311,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-16T18:06:55.309594Z"},"ingestedAt":"2026-09-15T21:44:50.656Z","slug":"CVE-2026-92259","body":"## Overview\n\nInteger overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file.\n\nThis issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d238.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}