CVE-2026-47320

MEDIUM CVSS 6.1 View on NVD ↗

Description

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

References

https://github.com/Samsung/rlottie/pull/593

Published: Jun 04, 2026 10:16 UTC Modified: Jun 04, 2026 15:27 UTC