CVE-2026-10305
CVE-2026-10305
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.
CVSS 6.1 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- 223a2a41ba4f462e4abe767bebba49a366c9b9fd: Not affected
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- 0.1+dfsg-4+deb12u1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4+deb12u2
Update to 0.1+dfsg-4+deb12u2
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2+deb13u1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.2+deb13u2
Update to 0.1+dfsg-4.2+deb13u2
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-5
Update to 0.1+dfsg-5
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: < 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
Update to 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-2ubuntu0.2+esm1
Update to 0.1+dfsg-2ubuntu0.2+esm1
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4ubuntu1.1+esm1
Update to 0.1+dfsg-4ubuntu1.1+esm1
rlottie Ubuntu:25.10
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.3ubuntu0.1~esm1
Update to 0.1+dfsg-4.3ubuntu0.1~esm1