CVE-2026-47306
CVE-2026-47306
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.
CVSS 6.1 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- e2d19e3b150e0e4a9586fa90b56fd3061cc98945: Not affected (git)
No fix published
rlottie Debian:12
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-3
Update to 0.1+dfsg-3
rlottie Debian:13
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-3
Update to 0.1+dfsg-3
rlottie Debian:14
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-3
Update to 0.1+dfsg-3
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: < 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
Update to 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-2ubuntu0.2+esm1
Update to 0.1+dfsg-2ubuntu0.2+esm1
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4ubuntu1.1+esm1
Update to 0.1+dfsg-4ubuntu1.1+esm1
rlottie Ubuntu:25.10
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.3ubuntu0.1~esm1
Update to 0.1+dfsg-4.3ubuntu0.1~esm1