Threat database

A heap-based buffer overflow vulnerability exists in Samsung Opensource rlottie, triggered via environment variables. This flaw can cause a denial of service by crashing the affected application. No confidentiality or integrity impacts are reported. The vulnerability has a medium severity score of 5.5 CVSS v3.1. No affected versions or patches are explicitly stated.

CVE-2026-92259 is an integer overflow or wraparound vulnerability in Samsung Opensource Escargot. It allows attackers with write access to the bytecode-cache directory to trigger a heap-based buffer overflow, leading to denial of service. The vulnerability affects a specific Escargot commit identified by ac94df78493ee6fede286620d94f724e46b4d238. No patch or remediation information is provided.

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

CVE-2026-86315 is a numeric truncation error vulnerability in Samsung Open Source Escargot on Linux x86-64. It allows an attacker who can supply JavaScript for execution to cause an out-of-bounds write by providing a crafted class definition with an instance initialization entry count exceeding UINT16_MAX. This leads to native memory corruption and a crash of the host process. The vulnerability has a CVSS score of 6.2, indicating medium severity.

CVE-2026-86314 is an integer overflow vulnerability in the source-bounds check within the Memory::init() function of Samsung Opensource Walrus. This flaw allows a remote attacker to craft a WebAssembly module that triggers a 32-bit unsigned addition wraparound, bypassing bounds checks and causing an out-of-bounds heap read and denial of service. The vulnerability affects the Walrus component identified by commit ff3bf5ff5c4878f8e5572c9593d303f6bc997443. No affected versions or patches are explicitly stated.

CVE-2026-86313 is an out-of-bounds write vulnerability in Samsung Opensource Walrus. This flaw allows buffer overflow conditions that can lead to high impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and user interaction. It has been assigned a high severity score of 7.8. No specific affected versions or patches have been disclosed yet.

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630.