CVE-2026-47319: Medium severity rLottie vulnerability
Last updated 20 July 2026
Other sources
Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-2+deb11u2Fixed in 0.1+dfsg-4+deb12u2Fixed in 0.1+dfsg-4.2+deb13u2Fixed in 0.1+dfsg-5 - Upgrade
Upgrade
Samsung Open Source rlottieto a version that resolves this vulnerability.Fixed in 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47319?
The severity of CVE-2026-47319 is classified as medium with a CVSS score of 6.1.
How do I fix CVE-2026-47319?
To fix CVE-2026-47319, update to the latest version of Samsung rLottie that is beyond the commit 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.
What vulnerability type is CVE-2026-47319?
CVE-2026-47319 is a memory allocation vulnerability due to excessive size value.
Which software is affected by CVE-2026-47319?
The affected software is Samsung rLottie, specifically versions prior to 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.
What impact does CVE-2026-47319 have on system security?
CVE-2026-47319 can potentially lead to excessive memory allocation, which may cause crashes or increased resource consumption.