Samsung Opensource

7 CVEs in 3 Samsung Opensource products, including Rlottie, Escargot, Walrus. Newest: CVE-2026-108978 (2026-10-11).

Samsung Opensource products with known CVEs

ProductCVEs
Rlottie3
Escargot2
Walrus2
Samsung Opensource CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-108978Medium5.52026-10-11Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f0…
CVE-2026-92259Medium5.52026-09-15Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-…
CVE-2026-91826Medium4.42026-09-15Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering craft…
CVE-2026-86315Medium6.22026-09-07An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to…
CVE-2026-86314Medium6.22026-09-07Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an…
CVE-2026-86313High7.82026-09-07Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7.
CVE-2026-49509Medium4.42026-09-04Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630.