Back to Database
Status published
Medium
CVE-2024-32669
Possible stack overflow due to a string encoding processing error
Vulnerability Description
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-32669
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jeongmin Choi
- Sangwoo Park
More from Samsung Open Source
View All →CVE-2025-53076
Improper Input Validation vulnerability in Samsung Open Source rLottie allows...
Medium
5.1
CVE-2025-53075
Improper Input Validation vulnerability in Samsung Open Source rLottie allows...
Medium
4.6
CVE-2025-53074
Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow...
Medium
5.1
CVE-2025-0634
Use After Free vulnerability in Samsung Open Source rLottie allows...
Medium
5.1
CVE-2024-40754
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript...
Medium
6.9
Affected Vendor
Samsung Open Source
View all reports →Affected Software
Escargot
Vulnerable Versions:
4.0.0
Timeline
Official Publish:
May 9th, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1059
Command and Scripting Interpreter
Execution
T1068
Exploitation for Privilege Escalation
Privilege Escalation
T1213
Data from Information Repositories
Collection
T1565.002
Stored Data Manipulation
Impact
T1003
OS Credential Dumping
Credential Access
T1552
Unsecured Credentials
Credential Access
T1055
Process Injection
Defense Evasion
T1105
Ingress Tool Transfer
Command and Control
T1485
Data Destruction
Impact