Multiple vulnerabilities have been discovered in rlottie, a library for rendering vector-based animations. These include out-of-bounds reads, stack-based buffer overflows, excessive memory allocation, uninitialized pointer access, and improper recursion limits. Exploitation could lead to denial of service, exposure of sensitive information, or potentially arbitrary code execution. These issues affect various versions of rlottie, particularly those packaged with Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS. Fixes are available through official Ubuntu security updates.