## Summary
CVE-2026-47311 describes a heap-based buffer overflow in Samsung Open Source Escargot. The issue affects the Escargot commit 590345cc6258317c5da850d846ce6baaf2afc2d3 and is classified as CWE-122 with a CVSS score of 7.8 (local attack, high impact on confidentiality/integrity/availability).
## Technical Details
The provided reference is a Samsung Escargot pull request (https://github.com/Samsung/escargot/pull/1565). The visible change log indicates logic around array handling and bounds-related checks, including:
- setArrayLength behavior when array length exceeds internal thresholds (mention of converting to “non-fast mode”).
- Additional checks for “index property within the string length due to proxy object”.
These changes strongly suggest the overflow condition is triggered by crafted inputs that influence array/string index handling, potentially leading to heap corruption.
## Affected
- samsung escargot 2026-05-14
- Escargot commit 590345cc6258317c5da850d846ce6baaf2afc2d3
## Impact
With CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, exploitation is expected to be:
- Local with low complexity and no privileges required (PR:N)
- User interaction required (UI:R)
- Capable of high impact on C, I, and A (heap corruption can lead to memory disclosure, integrity compromise, and crashes)
## Mitigation
1. Upgrade Escargot to a version/commit that includes the fixes from Samsung/escargot pull request #1565.
2. If immediate upgrade is not possible, restrict local untrusted input paths that can reach the affected array/string/proxy handling code paths.
3. Monitor for crashes or abnormal behavior in components embedding Escargot, since heap-based overflows often manifest as instability.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-122