# cve.now: Samsung Open Source

The newest entries naming Samsung Open Source as an affected vendor (up to 200), of 68 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124684](https://cve.now/CVE-2026-124684.md): This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character… (CVSS 5.1)
- [CVE-2026-118435](https://cve.now/CVE-2026-118435.md): Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. (CVSS 5.4)
- [CVE-2026-110934](https://cve.now/CVE-2026-110934.md): Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. (CVSS 4.4)
- [CVE-2026-110933](https://cve.now/CVE-2026-110933.md): Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. (CVSS 4.4)
- [CVE-2026-110392](https://cve.now/CVE-2026-110392.md): Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning (CVSS 9.8)
- [CVE-2026-85084](https://cve.now/CVE-2026-85084.md): Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds check (CVSS 6.3)
- [CVE-2026-10420](https://cve.now/CVE-2026-10420.md): Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5)
- [CVE-2026-82927](https://cve.now/CVE-2026-82927.md): Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5)
- [CVE-2026-82926](https://cve.now/CVE-2026-82926.md): NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. (CVSS 5.5)
- [CVE-2026-82797](https://cve.now/CVE-2026-82797.md): Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. (CVSS 5.5)
- [CVE-2026-19588](https://cve.now/CVE-2026-19588.md): Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. (CVSS 6.5)
- [CVE-2026-19587](https://cve.now/CVE-2026-19587.md): Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. (CVSS 6.5)
- [CVE-2026-19518](https://cve.now/CVE-2026-19518.md): Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. (CVSS 6.5)
- [CVE-2026-19517](https://cve.now/CVE-2026-19517.md): Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open So (CVSS 6.5)
- [CVE-2026-18772](https://cve.now/CVE-2026-18772.md): Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion. (CVSS 6.5)
- [CVE-2026-15551](https://cve.now/CVE-2026-15551.md): Samsung rlottie: Numeric truncation in gray\_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size (CVSS 5.5)
- [CVE-2026-58307](https://cve.now/CVE-2026-58307.md): Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. (CVSS 6.1)
- [CVE-2026-58306](https://cve.now/CVE-2026-58306.md): Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 6.1)
- [CVE-2026-58305](https://cve.now/CVE-2026-58305.md): Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. (CVSS 6.1)
- [CVE-2026-58304](https://cve.now/CVE-2026-58304.md): Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 6.1)
- [CVE-2026-58303](https://cve.now/CVE-2026-58303.md): Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 6.1)
- [CVE-2026-14160](https://cve.now/CVE-2026-14160.md): Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. (CVSS 5.9)
- [CVE-2026-8916](https://cve.now/CVE-2026-8916.md): Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. (CVSS 6.1)
- [CVE-2026-47318](https://cve.now/CVE-2026-47318.md): Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. (CVSS 6.1)
- [CVE-2026-47306](https://cve.now/CVE-2026-47306.md): Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. (CVSS 6.1)
- [CVE-2026-49510](https://cve.now/CVE-2026-49510.md): Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. (CVSS 6.1)
- [CVE-2026-10305](https://cve.now/CVE-2026-10305.md): Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. (CVSS 6.1)
- [CVE-2026-47319](https://cve.now/CVE-2026-47319.md): Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. (CVSS 6.1)
- [CVE-2026-47320](https://cve.now/CVE-2026-47320.md): Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized (CVSS 6.1)
- [CVE-2026-8915](https://cve.now/CVE-2026-8915.md): Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 8.8)
- [CVE-2026-47317](https://cve.now/CVE-2026-47317.md): Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. (CVSS 5.5)
- [CVE-2026-47316](https://cve.now/CVE-2026-47316.md): Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. (CVSS 5.5)
- [CVE-2026-47315](https://cve.now/CVE-2026-47315.md): Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. (CVSS 5.5)
- [CVE-2026-47314](https://cve.now/CVE-2026-47314.md): Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 7.8)
- [CVE-2026-47313](https://cve.now/CVE-2026-47313.md): Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. (CVSS 5.5)
- [CVE-2026-47312](https://cve.now/CVE-2026-47312.md): Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. (CVSS 5.5)
- [CVE-2026-47311](https://cve.now/CVE-2026-47311.md): Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. (CVSS 7.8)
- [CVE-2026-47310](https://cve.now/CVE-2026-47310.md): Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. (CVSS 7.8)
- [CVE-2026-47309](https://cve.now/CVE-2026-47309.md): Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. (CVSS 5.5)
- [CVE-2026-47308](https://cve.now/CVE-2026-47308.md): NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. (CVSS 5.5)
- [CVE-2026-47307](https://cve.now/CVE-2026-47307.md): NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssemb (CVSS 5.5)
- [CVE-2026-6840](https://cve.now/CVE-2026-6840.md): Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to comm (CVSS 5.5)
- [CVE-2026-6839](https://cve.now/CVE-2026-6839.md): Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor i (CVSS 6.6)
- [CVE-2026-41667](https://cve.now/CVE-2026-41667.md): Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant (CVSS 6.6)
- [CVE-2026-41666](https://cve.now/CVE-2026-41666.md): Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation (CVSS 6.6)
- [CVE-2026-41665](https://cve.now/CVE-2026-41665.md): Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for larg (CVSS 6.1)
- [CVE-2026-41664](https://cve.now/CVE-2026-41664.md): Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes (CVSS 6.6)
- [CVE-2026-40450](https://cve.now/CVE-2026-40450.md): Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption f (CVSS 6.6)
- [CVE-2026-40449](https://cve.now/CVE-2026-40449.md): Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source O (CVSS 6.6)
- [CVE-2026-40448](https://cve.now/CVE-2026-40448.md): Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung O (CVSS 5.3)
- [CVE-2026-40447](https://cve.now/CVE-2026-40447.md): Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115a (CVSS 5.1)
- [CVE-2026-40446](https://cve.now/CVE-2026-40446.md): Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This (CVSS 6.9)
- [CVE-2026-25209](https://cve.now/CVE-2026-25209.md): Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5 (CVSS 6.5)
- [CVE-2026-25208](https://cve.now/CVE-2026-25208.md): Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4 (CVSS 8.1)
- [CVE-2026-25207](https://cve.now/CVE-2026-25207.md): Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b (CVSS 7.4)
- [CVE-2026-25206](https://cve.now/CVE-2026-25206.md): Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5 (CVSS 6.7)
- [CVE-2026-25205](https://cve.now/CVE-2026-25205.md): Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash (CVSS 7.4)
- [CVE-2026-25204](https://cve.now/CVE-2026-25204.md): Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process a (CVSS 6.2)
- [CVE-2025-53074](https://cve.now/CVE-2025-53074.md): Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. (CVSS 5.1)
- [CVE-2025-53076](https://cve.now/CVE-2025-53076.md): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. (CVSS 5.1)
- [CVE-2025-53075](https://cve.now/CVE-2025-53075.md): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. (CVSS 4.6)
- [CVE-2025-0634](https://cve.now/CVE-2025-0634.md): Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. (CVSS 5.1)
- [CVE-2024-40754](https://cve.now/CVE-2024-40754.md): Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escarg (CVSS 6.9)
- [CVE-2024-32671](https://cve.now/CVE-2024-32671.md): Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escarg (CVSS 6.9)
- [CVE-2024-32673](https://cve.now/CVE-2024-32673.md): Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. (CVSS 6.7)
- [CVE-2024-32672](https://cve.now/CVE-2024-32672.md): A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of ser (CVSS 5.3)
- [CVE-2024-32669](https://cve.now/CVE-2024-32669.md): Possible stack overflow due to a string encoding processing error (CVSS 5.3)
- [CVE-2023-41268](https://cve.now/CVE-2023-41268.md): Possible stack overflow due to insufficient input validation (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/samsung-open-source
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.