Medium severity · published May 9, 2024
CVE-2024-32669
Possible stack overflow due to a string encoding processing error
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers.
However, it occurs in the test code and does not include in the release.
This issue affects escargot: 4.0.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Escargot · Samsung Open Source
4.0.0 · source: vendor, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-32669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-32669
github.com
https://github.com/Samsung/escargot/pull/1326
More from Escargot
9.8
CVE-2026-47314
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers
9.8
CVE-2026-47311
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers
9.8
CVE-2026-47310
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation
9.8
CVE-2026-40446
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot:…
9.8
CVE-2026-25208
Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335