CVE-2026-15551
CVE-2026-15551 · Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
CVSS 5.5 · Medium · EPSS 0.1%
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- bf689b72b8482c5ea674235854bd11b6d1b42588: Not affected
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- 0.1+dfsg-4+deb12u1
- 0.1+dfsg-4+deb12u2
- 0.1+dfsg-4.1
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2+deb13u1
- 0.1+dfsg-4.2+deb13u2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- 0.1+dfsg-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- 0.1+dfsg-4ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:26.10
- Versions
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-4.3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published