CVE-2026-82797

Published: Aug 31, 2026Modified: Sep 1, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: PSIRT@samsung.com (Secondary)

Description

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (1)

https://github.com/Samsung/rlottie/pull/603

Source: PSIRT@samsung.com

Timeline

No history available yet.