Threats affecting pkg:github/samsung/rlottie

7 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.1%	CVE-2026-8916Samsung Open Source rlottie · Out-of-bounds Write Medium6.1EPSS 0.1%2026-06-04CVE Database V5CVE-2026-8916 CVE-2026-8916 is an out-of-bounds write vulnerability in the Samsung Open Source rlottie library that can lead to buffer overflow conditions. It affects versions before commit dcfde72eae1b0464dc0dd760aec00ada6a148635. The vulnerability requires local access with low attack complexity and user interaction. It has a CVSS 3.1 base score of 6.1, indicating medium severity. The impact includes integrity loss and high availability impact. No official patch or remediation guidance is currently available from the vendor. EPSS 0.1%Vulnerability CWE-787	CVE Database V5	2026-06-04
Medium	6.1	EPSS 0.1%	CVE-2026-49510Samsung Open Source rlottie · Integer Overflow or Wraparound Medium6.1EPSS 0.1%2026-06-04CVE Database V5CVE-2026-49510 Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f. EPSS 0.1%Vulnerability CWE-190	CVE Database V5	2026-06-04
Medium	6.1	EPSS 0.1%	CVE-2026-10305Samsung Open Source rlottie · Out-of-bounds Read Medium6.1EPSS 0.1%2026-06-04CVE Database V5CVE-2026-10305 Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd. EPSS 0.1%Vulnerability CWE-125	CVE Database V5	2026-06-04
Medium	5.1	EPSS 0.4%	CVE-2025-53074Samsung Open Source rLottie · Out-of-bounds Read Medium5.1EPSS 0.4%2025-06-30CVE Database V5CVE-2025-53074 Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. EPSS 0.4%Vulnerability CWE-125	CVE Database V5	2025-06-30
Medium	5.1	EPSS 0.4%	CVE-2025-53076Samsung Open Source rLottie · Improper Input Validation Medium5.1EPSS 0.4%2025-06-30CVE Database V5CVE-2025-53076 Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. EPSS 0.4%Vulnerability CWE-20	CVE Database V5	2025-06-30
Medium	4.6	EPSS 0.3%	CVE-2025-53075Samsung Open Source rLottie · Improper Input Validation Medium4.6EPSS 0.3%2025-06-30CVE Database V5CVE-2025-53075 Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. EPSS 0.3%Vulnerability CWE-20	CVE Database V5	2025-06-30
Medium	5.1	EPSS 0.5%	CVE-2025-0634Samsung Open Source rLottie · Use After Free Medium5.1EPSS 0.5%2025-06-30CVE Database V5CVE-2025-0634 Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. EPSS 0.5%Vulnerability CWE-416	CVE Database V5	2025-06-30

Page 1 of 1