CVE-2026-8916: Medium severity Samsung rLottie vulnerability

Q: What is the severity of CVE-2026-8916?

The severity of CVE-2026-8916 is medium with a score of 6.1.

Q: How do I fix CVE-2026-8916?

To fix CVE-2026-8916, update to the latest version of Samsung rLottie that addresses the out-of-bounds write vulnerability.

Q: What is CVE-2026-8916 about?

CVE-2026-8916 refers to an out-of-bounds write vulnerability in Samsung Open Source rlottie that allows for overflow buffers.

Q: What systems are affected by CVE-2026-8916?

CVE-2026-8916 affects versions of Samsung rLottie prior to commit dcfde72eae1b0464dc0dd760aec00ada6a148635.

Q: What are the potential impacts of CVE-2026-8916?

CVE-2026-8916 can lead to information leakage and application crashes due to the overflow buffers.

Published Jun 4, 2026

Updated

Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635.

Affected Software

1 affected component

Samsung rLottie<dcfde72eae1b0464dc0dd760aec00ada6a148635

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rlottie to a version that resolves this vulnerability.
Patch dcfde72eae1b0464dc0dd760aec00ada6a148635

Event History

Jun 4, 2026

CVE Published

via MITRE·09:44 AM

Data Sourced

via MITRE·09:44 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Jun 29, 58424

Event

via FIRST·06:25 PM

Frequently Asked Questions

What is the severity of CVE-2026-8916?

The severity of CVE-2026-8916 is medium with a score of 6.1.

How do I fix CVE-2026-8916?