This vulnerability in Samsung Open Source rlottie is classified under CWE-1325 (Improperly Controlled Sequential Memory Allocation) and CWE-20 (Improper Input Validation). It allows an attacker to trigger exponential data expansion through uncontrolled memory allocation sequences, potentially leading to denial of service by exhausting system resources. The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact.

The vulnerability can cause denial of service conditions by exhausting memory or system resources due to exponential data expansion. There is no impact on confidentiality or integrity. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Samsung Open Source advisories for updates. Until a fix is available, consider limiting exposure to untrusted inputs that could trigger the vulnerability.