Out-of-Bounds Write Vulnerability in Samsung rlottie
CVE-2026-8916

6.1MEDIUM

Key Information:

Vendor

Samsung Open Source

Status
Rlottie
Vendor
CVE Published:
4 June 2026

What is CVE-2026-8916?

The vulnerability in Samsung's rlottie stems from an out-of-bounds write issue that can lead to buffer overflow conditions. This flaw primarily affects versions prior to dcfde72eae1b0464dc0dd760aec00ada6a148635, allowing potential attackers to manipulate memory, which could compromise the integrity and security of affected systems.

Affected Version(s)

rlottie dcfde72eae1b0464dc0dd760aec00ada6a148635

References

https://github.com/Samsung/rlottie/pull/589

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.