CVE-2026-25204

HighCVSS 7.5/10Last modified Oct 26, 2026

Description

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.

This issue affects escarogt prior to commit hash

97e8115ab1110bc502b4b5e4a0c689a71520d335

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-502CWE-843

Affected software

VendorProductVersions
Samsung Open SourceEscargot97e8115ab1110bc502b4b5e4a0c689a71520d335

References

Timeline

Published
Apr 13, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-252059.8Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash CVE-2026-252069.1Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5CVE-2026-252079.8Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4bCVE-2026-252089.8Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4CVE-2026-252099.1Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5CVE-2026-25219.8A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the componCVE-2026-252107.8In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow chCVE-2026-252113.2Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.CVE-2026-252129.9An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker withCVE-2026-252196.5The `access_key` and `connection_string` connection properties were not marked as sensitive names in secrets masker. This means that user wiCVE-2026-25229.8A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the cCVE-2026-252206.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Message
CVE-2026-25204: High severity, CVSS 7.5 | Vulnix