Samsung Opensource Escargot processes bytecode cache files with an integer that can overflow or wrap around. The resulting value is used to compute the size of a heap buffer, corrupting the buffer and causing a heap-based buffer overflow that brings the application to a halt. The flaw does not lead to code execution or information disclosure; its primary consequence is a service disruption. This weakness is classified as an integer overflow (CWE‑190).

The vulnerability is present in any build of Samsung Opensource: Escargot that includes commit ac94df78493ee6fede286620d94f724e46b4d238 or earlier. No official release version has been cited, so any deployment built from the repository at or before this commit is potentially insecure. The flaw is triggered by a crafted cache file written into the bytecode‑cache directory, so the vulnerability only applies when an attacker has the ability to write to that directory.

The CVSS score of 5.5 rates this flaw as moderate severity. The EPSS score of less than 1% indicates a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker with local write access to the bytecode‑cache directory can create a malicious file that triggers the overflow, causing the application to crash. No remote or unauthenticated exploitation pathway is evident from the provided data.