This vulnerability in Samsung Open Source rlottie is characterized by improper validation of specified quantities in input and allocation of resources without limits or throttling (CWE-1284 and CWE-770). It allows an attacker to cause excessive allocation of resources, which can impact availability. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. There is no vendor advisory or patch information available at this time.

The vulnerability can lead to excessive resource allocation, resulting in denial of service conditions affecting availability of the rlottie component. There is no impact on confidentiality or integrity reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the rlottie component to untrusted inputs and monitor for unusual resource consumption patterns related to rlottie usage.