CVE Catalog

CVE-2026-19588

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

In Samsung Open Source rlottie, an integer overflow vulnerability leads to buffer overflow, potentially allowing arbitrary code execution.

Risk Assessment

An attacker could exploit this to execute arbitrary code in the context of the application using rlottie, potentially leading to system compromise.

Recommendation

Update the rlottie library to the latest version that includes a fix for the buffer overflow.

Original NVD description (English source)

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS