CVE Catalog
CVE-2026-19517
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in Samsung Open Source rlottie involves improper validation of specified quantity in input and allocation of resources without limits or throttling, allowing excessive allocation.
Risk Assessment
Excessive resource allocation can lead to memory exhaustion or other system resource depletion, potentially causing application crashes or denial of service.
Recommendation
Update rlottie to a patched version and consider implementing resource allocation limits in applications using this library.
Original NVD description (English source)
Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.