Buffer overflow in Samsung Opensource Rlottie
CVE-2026-91826
Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L.
Affected products
- Samsung Opensource Rlottie — versions 480a2ad0c5d2e45458c545b8213279e9e8b71e39
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-91826?
- CVE-2026-91826 is a medium-severity vulnerability in Samsung Opensource Rlottie, classified under Stack-based Buffer Overflow. CVSS score: 4.4/10. Published 2026-09-15.
- How severe is CVE-2026-91826?
- Medium severity. CVSS v3 base score is 4.4 out of 10.