This vulnerability is a stack-based buffer overflow (CWE-121) in the rlottie library maintained by Samsung Open Source. It affects versions prior to a specific commit (ce72b35a7ad0dded03051d3aa0ef75321c3bd035). The CVSS 3.1 base score is 6.1, reflecting medium severity with attack vector local, low attack complexity, no privileges required, but user interaction needed. The impact is limited to integrity and availability, with no confidentiality impact. The vulnerability is published but lacks an official remediation level or patch link. No exploits are known in the wild.

The vulnerability can lead to a stack-based buffer overflow, potentially causing denial of service or integrity issues in affected rlottie library instances. Exploitation requires local access and user interaction, limiting remote exploitation risks. There is no indication of confidentiality compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor Samsung Open Source communications for updates. Until a patch is released, avoid running untrusted code that uses the vulnerable rlottie versions and limit local user access where possible.