CVE-2026-82797
CVE-2026-82797
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
CVSS 5.5 · Medium · EPSS 0.1%
- Published
- Updated
Stack: system
Affected products and versions
rlottie
- Versions
- ≥ 0, < 8de0d9e6ca80ffef654965505981727b9fa06a51: Affected (git)
No fix published
rlottie Debian:12
- Versions
- 0.1+dfsg-4
- 0.1+dfsg-4+deb12u1
- 0.1+dfsg-4+deb12u2
- 0.1+dfsg-4.1
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:13
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.2+deb13u1
- 0.1+dfsg-4.2+deb13u2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Debian:14
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:20.04:LTS
- Versions
- 0~git20190721.24346d0+dfsg-2
- 0~git20190721.24346d0+dfsg-2build1
- 0~git20200305.a717479+dfsg-1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm1
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
- 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:22.04:LTS
- Versions
- 0.1+dfsg-2
- 0.1+dfsg-2ubuntu0.1
- 0.1+dfsg-2ubuntu0.2
- 0.1+dfsg-2ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:24.04:LTS
- Versions
- 0.1+dfsg-4ubuntu1
- 0.1+dfsg-4ubuntu1.1
- 0.1+dfsg-4ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:26.10
- Versions
- 0.1+dfsg-4.3
- 0.1+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
rlottie Ubuntu:Pro:26.04:LTS
- Versions
- 0.1+dfsg-4.2
- 0.1+dfsg-4.3
- 0.1+dfsg-4.3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published