CVE Catalog
CVE-2026-19588
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
In Samsung Open Source rlottie, an integer overflow vulnerability leads to buffer overflow, potentially allowing arbitrary code execution.
Risk Assessment
An attacker could exploit this to execute arbitrary code in the context of the application using rlottie, potentially leading to system compromise.
Recommendation
Update the rlottie library to the latest version that includes a fix for the buffer overflow.
Original NVD description (English source)
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

