CVE-2026-110934 Details
Description
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.
A vulnerability exists in Samsung Open Source Vyond prior to the commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa, due to improper validation of array indices. This flaw allows for input data manipulation by accessing the ENCLAVES array without appropriate bounds checking on user-controlled parameters. As a result, it could lead to out-of-bounds access and potential application panics.
Users can update to the version of Vyond that includes the commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Samsung/Vyond/commit/be6e297b0c4836e20d73b2f8a40a561ea496ebaa | [email protected] | Source CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Samsung Open Source Vyond | < be6e297b0c4836e20d73b2f8a40a561ea496ebaa |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |