CVE-2026-124684: Use After Free

Q: What level of access does an attacker need to exploit this issue?

The vector is local and requires no privileges or user interaction. Exploitation also has high attack complexity.

Q: What is the expected impact if exploitation succeeds?

The reported impact is limited to availability; confidentiality and integrity are listed as unaffected. Successful exploitation may cause a denial of service.

Q: Which Escargot versions are affected?

Escargot versions before commit 8bc35b7b88f0f96c66a42aa965a1a710308b61d5 are affected. The provided data does not identify a release version containing the fix.

Published Nov 9, 2026

Updated

Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.

This issue affects Escargot: before 8bc35b7b88f0f96c66a42aa965a1a710308b61d5.

Affected Software

1 affected component

Samsung Escargot<8bc35b7b88f0f96c66a42aa965a1a710308b61d5

Event History

Nov 9, 2026

CVE Published

via MITRE·11:28 AM

Data Sourced

via MITRE·11:28 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vector is local and requires no privileges or user interaction. Exploitation also has high attack complexity.

What is the expected impact if exploitation succeeds?

The reported impact is limited to availability; confidentiality and integrity are listed as unaffected. Successful exploitation may cause a denial of service.

Which Escargot versions are affected?

Escargot versions before commit 8bc35b7b88f0f96c66a42aa965a1a710308b61d5 are affected. The provided data does not identify a release version containing the fix.

CVE-2026-124684: Use After Free

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?

Which Escargot versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?

Which Escargot versions are affected?