p PatchFirst

PatchFirst · Latest vulnerabilities

rlottie vulnerabilities

Vulnerabilities published for rlottie in the last 30 days: 2. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 18

  1. CVE-2026-111105

    High · CVSS 7EPSS 0.14%Public exploitNo fix published

    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the rlottie library. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30207.

    rlottieOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  3. CVE-2026-91826

    Medium · CVSS 4.4EPSS 0.14%No fix published

    CVE-2026-91826

    Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

    rlottieOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  10. CVE-2026-15551

    Medium · CVSS 5.5EPSS 0.11%No fix published

    Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size

    Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .

    rlottieOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  16. CVE-2026-47319

    Medium · CVSS 6.1EPSS 0.1%Fix available

    CVE-2026-47319

    Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.

    rlottieOperating systems
    • Update to 0.1+dfsg-4ubuntu1.1+esm1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  17. CVE-2026-47320

    Medium · CVSS 6.1EPSS 0.1%Fix available

    CVE-2026-47320

    Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

    rlottieOperating systems
    • Update to 0.1+dfsg-4ubuntu1.1+esm1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →