CVE-2026-47306: Medium severity rlottie vulnerability
Last updated 20 July 2026
Other sources
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-2+deb11u2Fixed in 0.1+dfsg-4+deb12u2Fixed in 0.1+dfsg-4.2+deb13u2Fixed in 0.1+dfsg-5 - Upgrade
Upgrade
ubuntu/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-2ubuntu0.2+esm1 - Upgrade
Upgrade
ubuntu/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-4ubuntu1.1+esm1 - Upgrade
Upgrade
ubuntu/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-4.3ubuntu0.1~esm1 - Upgrade
Upgrade
rlottieto a version that resolves this vulnerability.Fixed in e2d19e3b150e0e4a9586fa90b56fd3061cc98945Patch e2d19e3b150e0e4a9586fa90b56fd3061cc98945
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47306?
The severity of CVE-2026-47306 is medium, rated at 6.1.
What types of data are affected by CVE-2026-47306?
CVE-2026-47306 affects oversized serialized data payloads processed by Samsung Open Source rlottie.
How can I mitigate the risks associated with CVE-2026-47306?
To mitigate CVE-2026-47306, users should ensure they are using a version of rlottie that is beyond e2d19e3b150e0e4a9586fa90b56fd3061cc98945.
What is the impact of CVE-2026-47306 on system performance?
CVE-2026-47306 may lead to service denial due to uncontrolled recursion, potentially causing system crashes or excessive resource consumption.
Does CVE-2026-47306 affect the confidentiality of data?
CVE-2026-47306 has no impact on the confidentiality of data as it primarily affects system stability and integrity.