CVE-2026-25204CWE-502CWE-843

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort

Medium · published April 13, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.

This issue affects escarogt prior to commit hash

97e8115ab1110bc502b4b5e4a0c689a71520d335

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.7th percentile
Weaknesses
CWE-502 · Deserialization of Untrusted Data; CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2026-04-13T00:47Z
EPSS history
Timeline
  • 13 APR 00:47Z
    Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort
    cvelistv5