CVE-2023-41268 Possible stack overflow due to insufficient input validation
Insufficient input validation in the Escargot JavaScript engine allows attackers to cause a stack overflow and segmentation fault, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-41268?
CVE-2023-41268 is a medium-severity memory corruption vulnerability in Samsung Open Source Escargot, published on 6 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.
Which versions are affected by CVE-2023-41268?
It affects 1 product.
Products include Samsung Escargot.
How do I fix CVE-2023-41268?
No fix has been published for CVE-2023-41268 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-41268 being exploited?
There is no known exploitation of CVE-2023-41268 in the wild and no public exploit code.
Other vulnerabilities in Samsung Open Source Escargot
Sources
Also known as GHSA-wr9j-hqv7-g8jm.