UBUNTU-CVE-2026-8916: Medium severity ubuntu/rlottie vulnerability

Q: What must an attacker do to exploit this issue?

The CVSS vector indicates local access and user interaction are required, while no privileges are required. The provided data does not specify the exact interaction or input needed.

Q: Which rlottie versions are affected?

The issue affects rlottie versions before commit dcfde72eae1b0464dc0dd760aec00ada6a148635. No Ubuntu package version information is provided.

Q: What is the potential impact?

Successful exploitation can cause an out-of-bounds write, with high availability impact and low integrity impact according to the CVSS vector. No confidentiality impact is indicated.

Published Jun 4, 2026

Updated

Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635.

Affected Software

5 affected componentsFixes available

ubuntu/rlottie*

ubuntu/rlottie<0.1+dfsg-4ubuntu1.1+esm1

0.1+dfsg-4ubuntu1.1+esm1

ubuntu/rlottie*

ubuntu/rlottie<0.1+dfsg-4.3ubuntu0.1~esm1

0.1+dfsg-4.3ubuntu0.1~esm1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/rlottie to a version that resolves this vulnerability.
Fixed in 0.1+dfsg-4ubuntu1.1+esm1
Upgrade
Upgrade ubuntu/rlottie to a version that resolves this vulnerability.
Fixed in 0.1+dfsg-4.3ubuntu0.1~esm1

Event History

Jun 4, 2026

CVE Published

via OSV·10:16 AM

Data Sourced

via OSV·10:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

The CVSS vector indicates local access and user interaction are required, while no privileges are required. The provided data does not specify the exact interaction or input needed.

Which rlottie versions are affected?

The issue affects rlottie versions before commit dcfde72eae1b0464dc0dd760aec00ada6a148635. No Ubuntu package version information is provided.

What is the potential impact?

Successful exploitation can cause an out-of-bounds write, with high availability impact and low integrity impact according to the CVSS vector. No confidentiality impact is indicated.

UBUNTU-CVE-2026-8916: Medium severity ubuntu/rlottie vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which rlottie versions are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which rlottie versions are affected?

What is the potential impact?