CVE-2026-47320

Published: Jun 4, 2026Modified: Jul 22, 2026Deferred

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Exploitability: 1.8 / Impact: 4.2

Source: PSIRT@samsung.com (Secondary)

Description

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (1)

https://github.com/Samsung/rlottie/pull/593

Source: PSIRT@samsung.com

Timeline

No history available yet.