CVE-2024-32669

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-32669

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-32669.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-32669

Published

2024-05-09T06:02:53.218Z

Modified

2026-07-08T06:55:35.986545537Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Summary

Possible stack overflow due to a string encoding processing error

Details

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release.

This issue affects escargot: 4.0.0.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32669.json",
    "cna_assigner": "samsung.tv_appliance",
    "cwe_ids": [
        "CWE-125",
        "CWE-20",
        "CWE-787"
    ]
}

References

Affected packages

Git / github.com/samsung/escargot

Affected ranges

Type

GIT

Repo

https://github.com/samsung/escargot

Events

Introduced

3e1fa28c8f1a8c6f34e2dd81461e90dee32b63e1

Last affected

3e1fa28c8f1a8c6f34e2dd81461e90dee32b63e1

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "last_affected": "4.0.0"
        }
    ]
}

Affected versions

4.*

4.0.0

v4.*

v4.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-32669.json"