UBUNTU-CVE-2026-47306: Medium severity ubuntu/rlottie vulnerability

Q: Which rlottie versions are affected?

Affected versions are those before commit e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates local attack access, no required privileges, and user interaction. The issue involves oversized serialized data payloads.

Q: What is the expected security impact?

The provided CVSS metrics indicate high availability impact and low integrity impact, with no confidentiality impact.

Published Jun 4, 2026

Updated

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

Affected Software

5 affected componentsFixes available

ubuntu/rlottie*

ubuntu/rlottie<0.1+dfsg-2ubuntu0.2+esm1

0.1+dfsg-2ubuntu0.2+esm1

ubuntu/rlottie<0.1+dfsg-4ubuntu1.1+esm1

0.1+dfsg-4ubuntu1.1+esm1

ubuntu/rlottie*

ubuntu/rlottie<0.1+dfsg-4.3ubuntu0.1~esm1

0.1+dfsg-4.3ubuntu0.1~esm1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/rlottie to a version that resolves this vulnerability.
Fixed in 0.1+dfsg-2ubuntu0.2+esm1
Upgrade
Upgrade ubuntu/rlottie to a version that resolves this vulnerability.
Fixed in 0.1+dfsg-4ubuntu1.1+esm1
Upgrade
Upgrade ubuntu/rlottie to a version that resolves this vulnerability.
Fixed in 0.1+dfsg-4.3ubuntu0.1~esm1

Event History

Jun 4, 2026

CVE Published

via OSV·10:16 AM

Data Sourced

via OSV·10:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which rlottie versions are affected?

Affected versions are those before commit e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

What does an attacker need to exploit this issue?

The CVSS vector indicates local attack access, no required privileges, and user interaction. The issue involves oversized serialized data payloads.

What is the expected security impact?

The provided CVSS metrics indicate high availability impact and low integrity impact, with no confidentiality impact.

UBUNTU-CVE-2026-47306: Medium severity ubuntu/rlottie vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which rlottie versions are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which rlottie versions are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?