PatchFirst · Latest vulnerabilities

rlottie vulnerabilities

Vulnerabilities published for rlottie in the last 30 days: 2. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 12

CVE-2026-111105
High · CVSS 7EPSS 0.14%Public exploitNo fix published
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the rlottie library. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30207.
rlottie Operating systems
Published October 15, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-108978
Medium · CVSS 5.5EPSS 0.15%No fix published
CVE-2026-108978
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.
rlottie Operating systems
Published October 11, 2026Updated October 16, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-91826
Medium · CVSS 4.4EPSS 0.14%No fix published
CVE-2026-91826
Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.
rlottie Operating systems
Published September 15, 2026Updated September 15, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-82797
Medium · CVSS 5.5EPSS 0.15%No fix published
CVE-2026-82797
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
rlottie Operating systems
Published August 31, 2026Updated August 31, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-19588
Medium · CVSS 6.5EPSS 0.35%No fix published
CVE-2026-19588
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
rlottie Operating systems
Published August 12, 2026Updated August 12, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-19587
Medium · CVSS 6.5EPSS 0.36%No fix published
CVE-2026-19587
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
rlottie Operating systems
Published August 12, 2026Updated August 12, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-19518
Medium · CVSS 6.5EPSS 0.36%No fix published
CVE-2026-19518
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
rlottie Operating systems
Published August 11, 2026Updated August 12, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-19517
Medium · CVSS 6.5EPSS 0.36%No fix published
CVE-2026-19517
Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
rlottie Operating systems
Published August 11, 2026Updated August 12, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-18772
Medium · CVSS 6.5EPSS 0.36%No fix published
CVE-2026-18772
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
rlottie Operating systems
Published August 4, 2026Updated August 12, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-15551
Medium · CVSS 5.5EPSS 0.11%No fix published
Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
rlottie Operating systems
Published July 13, 2026Updated July 13, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-49510
Medium · CVSS 6.1EPSS 0.1%No fix published
CVE-2026-49510
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f.
rlottie Operating systems
Published June 4, 2026Updated June 8, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2025-53076
Medium · CVSS 5.1EPSS 0.39%No fix published
CVE-2025-53076
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
rlottie Operating systems
Published June 30, 2025Updated June 30, 2025
Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

rlottie vulnerabilities

Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

CVE-2026-108978

CVE-2026-91826

CVE-2026-82797

CVE-2026-19588

CVE-2026-19587

CVE-2026-19518

CVE-2026-19517

CVE-2026-18772

Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size

CVE-2026-49510

CVE-2025-53076

Check your server