Samsung Open Source vulnerabilities

50 vulnerabilities

Known vulnerabilities in Samsung Open Source products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.

Products

8
4.4CVE-2026-110934samsung open sourcevyond
EPSS score
0.10%
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.
4.4CVE-2026-110933samsung open sourcevyond
EPSS score
0.10%
Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7.
9.8CVE-2025-0634debianrlottie+3
EPSS score
0.51%
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
9.8CVE-2025-53075debianrlottie+3
EPSS score
0.28%
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.
9.8CVE-2025-53076ubunturlottie+2
EPSS score
0.39%
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
9.1CVE-2025-53074debianrlottie+3
EPSS score
0.39%
Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.
9.8CVE-2024-40754samsung open sourceescargot
EPSS score
0.46%
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.
9.8CVE-2024-32671samsung open sourceescargot+1
EPSS score
0.49%
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.
5.3CVE-2024-32672samsung open sourceescargot
EPSS score
0.79%
A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. This issue affects Escargot: 4.0.0.
5.3CVE-2024-32669samsung open sourceescargot
EPSS score
0.65%
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0.
5.3CVE-2026-40448samsung open sourceone+1
EPSS score
0.12%
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.
6.6CVE-2026-40450samsung open sourceone+1
EPSS score
0.14%
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.
6.6CVE-2026-40449samsung open sourceone+1
EPSS score
0.14%
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.
7.5CVE-2026-40447samsung open sourceescargot+1
EPSS score
0.29%
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
9.8CVE-2026-40446samsung open sourceescargot+1
EPSS score
0.29%
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
6.1CVE-2026-41665samsung open sourceone+1
EPSS score
0.14%
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
6.6CVE-2026-41667samsung open sourceone+1
EPSS score
0.14%
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.
6.6CVE-2026-41664samsung open sourceone+1
EPSS score
0.14%
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1.30.0.
6.6CVE-2026-41666samsung open sourceone+1
EPSS score
0.14%
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.
7.5CVE-2026-47316samsung open sourceescargot+1
EPSS score
0.27%
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.