CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

PT-2026-114970

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179: Uncontrolled Recursion

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

EUVD-2026-102129

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

The lottie-android library (version 6.7.1 and earlier, including master ) is vulnerable to a Denial of Service (DoS) attack. A remote attacker can trigger this by providing a crafted Lottie animation JSON that contains a cyclic precomposition reference graph . This configuration leads to uncontro...

Samsung rlottie security vulnerabilities

Samsung Lottie versions 6.7.1 and earlier have security vulnerabilities. These vulnerabilities stem from specially crafted Lottie animation JSON files that contain recursive pre-combined references, triggering uncontrolled recursion in BaseLayer.forModel and CompositionLayer. This could allow...