CVE-2026-19587

A flaw was found in rlottie, an open-source animation library. This uncontrolled resource consumption vulnerability allows a remote attacker to cause a Denial of Service DoS by tricking a user into processing a specially crafted input that leads to excessive memory or CPU allocation. This can mak...

CVE-2026-15551

CVE-2026-15551 : Samsung Open Source rlottie fraught with an integer overflow/ wraparound in the function gray_hline() , causing a heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size. Risk details: attacker-controlled input through a crafted animation; CVSS3...