CVE-2026-15551
MEDIUMSamsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Title source: cnaDescription
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
References (1)
Core 1
Core References
Scores
CVSS v3
5.5
EPSS
0.0008
EPSS Percentile
0.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-190
Status
published
Products (1)
Samsung Open Source/rlottie
bf689b72b8482c5ea674235854bd11b6d1b42588
Published
Jul 13, 2026
Tracked Since
Jul 13, 2026