PT-2026-46171 · Samsung · Rlottie

Mihashco · CVE-2026-47320 · Published 2026-06-04 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions rlottie versions prior to eae37633fda13ac05b25c6c95aacea4bc33c80a3

Description Samsung Open Source rlottie contains an issue involving uncontrolled recursion and the access of uninitialized pointers. This allows for pointer manipulation and the processing of oversized serialized data payloads.

Recommendations Update to version eae37633fda13ac05b25c6c95aacea4bc33c80a3 or later.

Fix

Uncontrolled Recursion

Access of Uninitialized Pointer

Weakness Enumeration

CWE-674

CWE-824

Related Identifiers

CVE-2026-47320

Affected Products

Rlottie

References · 10

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-47320 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-47320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47320 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-47320 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-47320 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47320 · Vendor Advisory
• https://github.com/Samsung/rlottie/pull/593 · Note
• https://t.me/CVEtracker/55815 · Telegram Post
• https://t.me/cveNotify/165956 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2062548461770186792 · Twitter Post