Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-124684 EUVD-2026-119996GHSA-9jrp-q8cw-6g77

This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character poi…

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by samsung.tv_appliance

Description

This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remains in use. Successful triggering may cause the Escargot-based process to crash, resulting in a denial of service.

Affected products

VendorProductAffectedFixed
Samsung Open Source Escargot — —

References