CVE-2026-47320
CVE-2026-47320
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.
CVSS 6.1 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- eae37633fda13ac05b25c6c95aacea4bc33c80a3: Not affected
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- 0.1+dfsg-4+deb12u1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4+deb12u2
Update to 0.1+dfsg-4+deb12u2
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2+deb13u1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.2+deb13u2
Update to 0.1+dfsg-4.2+deb13u2
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-5
Update to 0.1+dfsg-5
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: < 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
Update to 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-2ubuntu0.2+esm1
Update to 0.1+dfsg-2ubuntu0.2+esm1
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4ubuntu1.1+esm1
Update to 0.1+dfsg-4ubuntu1.1+esm1
rlottie Ubuntu:25.10
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- Affected ranges
- ECOSYSTEM: < 0.1+dfsg-4.3ubuntu0.1~esm1
Update to 0.1+dfsg-4.3ubuntu0.1~esm1