CVE-2026-47319

Published: Jun 4, 2026Modified: Jul 22, 2026Deferred

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Exploitability: 1.8 / Impact: 4.2

Source: PSIRT@samsung.com (Secondary)

Description

Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.

Related CWEs

CWE-789

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (1)

https://github.com/Samsung/rlottie/pull/588

Source: PSIRT@samsung.com

Timeline

No history available yet.