4.4

CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.


This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSamsung Opensource
≫
Produkt rLottie
Default Statusunaffected
Version 480a2ad0c5d2e45458c545b8213279e9e8b71e39
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.015
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
PSIRT@samsung.com 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://github.com/Samsung/rlottie/pull/607