CVE-2026-82797
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Uncontrolled recursion in Samsung Open Source rlottie allows processing of serialized data with nested payloads, potentially leading to system overload or denial of service. Affects versions before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Risk Assessment
An attacker could exploit this vulnerability to trigger uncontrolled recursion, potentially causing application crashes or resource exhaustion, leading to service unavailability.
Recommendation
Immediately update the rlottie library to a version containing the fix (commit 8de0d9e6ca80ffef654965505981727b9fa06a51) or later.
Other vulnerabilities in rlottie
See all- CVE-2026-91826Medium
A stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie version 480a2ad0c5d2e45458c545b8213279e9e8b71e39.
- CVE-2026-49509Medium
Vulnerability in Samsung Opensource rLottie (version 25648aef19187b3f87f4d9420b8d761453ad4630) causes an out-of-bounds read, potentially leading to buffer overread.
- CVE-2026-19588Medium
In Samsung Open Source rlottie, an integer overflow vulnerability leads to buffer overflow, potentially allowing arbitrary code execution.
- CVE-2026-19587Medium
In Samsung Open Source rlottie, an uncontrolled resource consumption vulnerability leads to excessive memory allocation.
- CVE-2026-19518Medium
A vulnerability in Samsung Open Source rlottie involves improper validation of specified quantity in input, allowing input data manipulation.
- CVE-2026-19517Medium
A vulnerability in Samsung Open Source rlottie involves improper validation of specified quantity in input and allocation of resources without limits or throttling, allowing excessive allocation.
- CVE-2026-18772Medium
The Samsung Open Source rlottie library has a vulnerability in improperly controlled sequential memory allocation, allowing Exponential Data Expansion.
- CVE-2026-15551Medium
An integer overflow or wraparound vulnerability in Samsung Open Source rlottie leads to buffer overflows. This issue could allow an attacker to execute code or cause a crash.
- CVE-2026-8916Medium
Out-of-bounds write vulnerability in Samsung's rlottie library allows buffer overflows. The issue affects versions before commit dcfde72eae1b0464dc0dd760aec00ada6a148635.
- CVE-2026-49510Medium
Integer overflow vulnerability in Samsung's rlottie library allows integer attacks. The issue affects versions before commit 21292665023e5074b38254432716866d00f1985f.
Original NVD description (English source)
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS