CVE-2026-18772

MEDIUM

Samsung Open Source rlottie Improperly Controlled Sequential Memory Allocation Vulnerability

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-18772 has a selected CVSS score of 6.5 (medium).

Description

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

rlottie

Browse Samsung Open Source / rlottie

Default status: unaffected

CVE Listf487eff2f8086b84ae1c7faa0418abec909e874bunaffected

References

2