Heap-Based Buffer Overflow in Samsung Opensource rlottie

CVE-2026-108978

What is CVE-2026-108978?

A heap-based buffer overflow vulnerability has been identified in Samsung's Opensource rlottie, which can be exploited through environment variables. Attackers can leverage this flaw to potentially execute arbitrary code, posing a serious security threat to affected systems. This vulnerability is present in the specific commit e57b094f03c39a751a1fded6f7d6c13f1ed95ec9, and remediation is strongly advised to mitigate any risks associated with this issue.

References