CVE-2023-41268: Possible stack overflow due to insufficient input validation

5.3 CVSS

Description

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.

Classification

CVE ID: CVE-2023-41268

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.3

Affected Products

Vendor: Samsung Open Source

Product: Escargot

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.16% (probability of being exploited)

EPSS Percentile: 52.91% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://github.com/Samsung/escargot/pull/1260

Timeline