CVE-2026-47307

MEDIUM 5.5

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.

CWE	CWE-476
Vendor	samsung open source
Product	walrus
Published	May 19, 2026
Last Updated	May 19, 2026

Stay Ahead of the Next One

Get instant alerts for samsung open source walrus

Be the first to know when new medium vulnerabilities affecting samsung open source walrus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Samsung Open Source / Walrus

f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Samsung/walrus/pull/409

Credits

Sebastián Alba Vives