CVE-2026-19517
CVE-2026-19517
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVSS 6.5 · Medium · EPSS 0.4%
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- f487eff2f8086b84ae1c7faa0418abec909e874b: Not affected
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- 0.1+dfsg-4+deb12u1
- 0.1+dfsg-4+deb12u2
- 0.1+dfsg-4.1
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2+deb13u1
- 0.1+dfsg-4.2+deb13u2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- 0.1+dfsg-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- 0.1+dfsg-4ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:26.10
- Versions
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-4.3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published