CVE-2026-40447
published 2026-04-13CVE-2026-40447: Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.17%
6.8th percentile
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | escargot | — | — |
| samsung_open_source | escargot | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5qqm-hxgj-wv38: Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior
ghsa_unreviewed·2026-04-13
CVE-2026-40447 [MEDIUM] CWE-190 GHSA-5qqm-hxgj-wv38: Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
Red Hat
escargot: Escargot: Denial of Service due to integer overflow or wraparound vulnerability
vendor_redhat·2026-04-13·CVSS 5.1
CVE-2026-40447 [MEDIUM] CWE-190 escargot: Escargot: Denial of Service due to integer overflow or wraparound vulnerability
escargot: Escargot: Denial of Service due to integer overflow or wraparound vulnerability
A flaw was found in Escargot. This integer overflow or wraparound vulnerability can lead to undefined behavior, potentially allowing a local attacker to cause a Denial of Service (DoS) by making the system unstable or crash.
Package: openshift-logging/cluster-logging-operator-bundle (Logging Subsystem for Red Hat OpenShift) - Fix deferred
Package: openshift-logging/cluster-logging-rhel9-operator (Logging Subsystem for Red Hat OpenShift) - Fix deferred
Package: openshift-logging/eventrouter-rhel9 (Logging Subsystem for Red Hat OpenShift) - Fix deferred
Package: openshift-logging/fluentd-rhel9 (Logging Subsystem for Red Hat OpenShift) - Fix deferred
Package: openshift-logging/log-file-metric-expor
No detection rules found.
No public exploits indexed.
2026-04-13
Published