CVE-2026-47320: Medium severity Samsung rLottie vulnerability
Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rlottieto a version that resolves this vulnerability.Fixed in 0.1+dfsg-2+deb11u2Fixed in 0.1+dfsg-4+deb12u2Fixed in 0.1+dfsg-4.2+deb13u2Fixed in 0.1+dfsg-5 - Upgrade
Upgrade
Samsung Open Source rlottieto a version that resolves this vulnerability.Fixed in eae37633fda13ac05b25c6c95aacea4bc33c80a3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47320?
The severity of CVE-2026-47320 is rated as medium with a score of 6.1.
How do I fix CVE-2026-47320?
To fix CVE-2026-47320, update rlottie to the latest version after commit eae37633fda13ac05b25c6c95aacea4bc33c80a3.
What type of vulnerability is CVE-2026-47320?
CVE-2026-47320 is classified as an Access of Uninitialized Pointer and Uncontrolled Recursion vulnerability.
Which software is affected by CVE-2026-47320?
CVE-2026-47320 affects the Samsung Open Source rlottie software.
What are the potential consequences of CVE-2026-47320?
CVE-2026-47320 could lead to pointer manipulation and oversized serialized data payloads, potentially causing application instability.