CVE-2026-47306

Published: Jun 4, 2026Modified: Jul 22, 2026Deferred

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Exploitability: 1.8 / Impact: 4.2

Source: PSIRT@samsung.com (Secondary)

Description

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (1)

https://github.com/Samsung/rlottie/pull/585

Source: PSIRT@samsung.com

Timeline

No history available yet.