CVE-2026-47320 — Samsung Open Source / rlottie

CVE-2026-47320

Samsung Open Source / rlottie PUBLISHED

Description (CNA)

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

Affected (CNA)

Vendor / product	Versions
Samsung Open Source / rlottie	unaffected eae37633fda13ac05b25c6c95aacea4bc33c80a3

CWE

CWE-824, CWE-674

References

https://github.com/Samsung/rlottie/pull/593

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.