The vulnerability is an out-of-bounds write in the Samsung Escargot JavaScript engine that permits buffer manipulation. This flaw can corrupt data or cause process crashes when malformed input is processed. The impact is primarily a loss of data integrity and potential denial of service, as the engine can write beyond the intended memory buffer. The weakness is categorized as CWE-787 and can be exploited to tamper with memory structures.

Samsung Escargot, a JavaScript engine sourced from Samsung’s open‑source repository. No specific version details are supplied, so any installation of Escargot that incorporates the vulnerable code may be at risk until a fix is applied.

The CVSS score of 5.4 indicates moderate severity. EPSS data is not available, so the likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector involves supplying crafted input that triggers the out-of-bounds write, which could be achieved by a local user or an application that runs untrusted code. No remote exploitation path is explicitly described, but local exploitation can lead to memory corruption or application instability.