What is CVE-2024-32669?

CVE-2024-32669 is a medium-severity vulnerability in Samsung Open Source Escargot, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2024-05-14.

How severe is CVE-2024-32669?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Out-of-bounds Read in Samsung Open Source Escargot

CVE-2024-32669

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (46.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Samsung Open Source Escargot — versions 4.0.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation
CWE-125 — Out-of-bounds Read
CWE-787 — Out-of-bounds Write

References

PSIRT@samsung.com

Frequently asked questions

What is CVE-2024-32669?: CVE-2024-32669 is a medium-severity vulnerability in Samsung Open Source Escargot, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2024-05-14.
How severe is CVE-2024-32669?: Medium severity. CVSS v3 base score is 5.3 out of 10.