Improper Input Validation in Samsung Open Source rlottie Leading to Payload Issues
CVE-2026-18772

5.5MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Rlottie
Vendor
CVE Published:
4 August 2026

What is CVE-2026-18772?

An improper input validation vulnerability in Samsung's open source library rlottie allows for the processing of oversized serialized data payloads. This flaw can potentially lead to unexpected behavior or security risks when the library is used in applications that handle data serialization, creating avenues for exploitation.

Affected Version(s)

rlottie f487eff2f8086b84ae1c7faa0418abec909e874b

References

https://github.com/Samsung/rlottie/pull/596

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.