CVE-2026-108978: Buffer Overflow
Published Oct 11, 2026
·Updated
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.
This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.
Affected Software
1 affected component
Samsung rLottie=e57b094f03c39a751a1fded6f7d6c13f1ed95ec9
Event History
Oct 11, 2026
CVE Published
via MITRE·09:31 PM
Data Sourced
via MITRE·09:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Is this remotely exploitable?
The published vector lists a local attack vector. The available data does not indicate remote exploitation.
2
What access or interaction does exploitation require?
The vector indicates no privileges are required, but user interaction is required. The issue is associated with environment variables.
3
What is the expected security impact?
The published vector indicates high availability impact, with no confidentiality or integrity impact listed. A successful exploit may therefore cause a denial-of-service condition.
4
Which code revision is identified as affected?
The issue identifies rlottie revision e57b094f03c39a751a1fded6f7d6c13f1ed95ec9 as affected.