CVE-2025-0634
CVE-2025-0634
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
CVSS 5.1 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- V0.2: Affected (custom)
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4+deb12u1
Update to 0.1+dfsg-4+deb12u1
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.2+deb13u1
Update to 0.1+dfsg-4.2+deb13u1
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.3
Update to 0.1+dfsg-4.3
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: < 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
Update to 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
rlottie Ubuntu:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-2ubuntu0.2
Update to 0.1+dfsg-2ubuntu0.2
rlottie Ubuntu:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4ubuntu1.1
Update to 0.1+dfsg-4ubuntu1.1
rlottie Ubuntu:25.10
- Versions
- 0.1+dfsg-4.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.2ubuntu0.1
Update to 0.1+dfsg-4.2ubuntu0.1