CVE-2026-47320: Samsung Open Source Rlottie

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

Affected products

• Samsung Open Source Rlottie

Published 2026-06-04. Last modified 2026-07-22.