The rlottie library contains an uncontrolled recursion vulnerability triggered by processing oversized serialized data payloads. This flaw can cause the application using rlottie to experience a denial of service condition due to excessive recursion depth or resource exhaustion. The affected versions are explicitly listed and correspond to certain Ubuntu package versions of rlottie. The vulnerability does not impact confidentiality but can impair availability. No vendor advisory or patch information is provided, so remediation status is unclear.

This vulnerability impacts availability by enabling denial of service through uncontrolled recursion when processing oversized serialized data. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted serialized data with affected rlottie versions to mitigate potential denial of service.