The vulnerability identified as CVE-2026-47319 in Samsung Open Source rlottie involves a memory allocation with an excessive size value, classified under CWE-789. This can lead to excessive memory allocation, potentially causing denial of service or application instability. The affected versions are those prior to the commit 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No vendor advisory or patch information is currently provided.

The vulnerability allows an attacker with local access and user interaction to trigger excessive memory allocation, which can lead to denial of service by exhausting system resources. There is no impact on confidentiality, and integrity impact is low. The availability impact is high due to potential application or system instability caused by excessive memory usage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure by restricting local access and minimizing user interaction with untrusted inputs to rlottie. Monitor vendor channels for updates regarding patches or official mitigations.