Samsung Rlottie vulnerabilities

10 CVEs affecting Samsung Rlottie, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-19588, published 2026-08-12.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-0634, published 2025-06-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
• CVE-2025-53076, published 2025-06-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
• CVE-2025-53074, published 2025-06-30. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.
• CVE-2026-19587, published 2026-08-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
• CVE-2026-19518, published 2026-08-11. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
• CVE-2026-19517, published 2026-08-11. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
• CVE-2026-18772, published 2026-08-04. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
• CVE-2026-19588, published 2026-08-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
• CVE-2025-53075, published 2025-06-30. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.
• CVE-2026-15551, published 2026-07-13. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .