CVE-2026-86314

MEDIUMCVSS 6.2

Description

Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses the bounds check. This issue affects Walrus: ff3bf5ff5c4878f8e5572c9593d303f6bc997443.

Timeline

Published:September 7th, 2026 3:17 AM

Last modified:September 8th, 2026 7:09 PM

CVSS Scoring

CVSS v3: 6.2 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-190

References & Reports

Advisories, patches, and third-party reports

https://github.com/Samsung/walrus/pull/482

Source: NIST NVD · Data may lag official sources by up to one minute