CVE-2026-18772
CVE-2026-18772
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVSS 6.5 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- f487eff2f8086b84ae1c7faa0418abec909e874b: Not affected
No fix published
rlottie Debian:12
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4
Update to 0.1+dfsg-4
rlottie Debian:13
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4
Update to 0.1+dfsg-4
rlottie Debian:14
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4
Update to 0.1+dfsg-4
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- 0.1+dfsg-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- 0.1+dfsg-4ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:26.10
- Versions
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-4.3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published