CVE-2026-86314

Name of the Vulnerable Software and Affected Versions Samsung walrus version ff3bf5ff5c4878f8e5572c9593d303f6bc997443

Description An integer overflow occurs during the source-bounds check within the Memory::init() function (located in src/runtime/Memory.cpp). A remote attacker can exploit this by providing a crafted WebAssembly module where a 32-bit unsigned addition wraps around, bypassing the bounds check. This leads to an out-of-bounds heap read—a condition where the system reads data beyond the allocated memory buffer—resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.