CVE-2026-47319
Memory Allocation Flaw in rlottie Library
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Samsung TV & Appliance
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | rlottie | to 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-789 | The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory allocation issue in the Samsung Open Source rlottie library. It occurs when the software attempts to allocate memory with an excessively large size value, which can lead to excessive allocation.
How can this vulnerability impact me? :
The vulnerability can lead to excessive memory allocation, which may cause a denial of service by exhausting system resources. According to the CVSS score, it requires local access with low complexity and user interaction, and it can impact availability by causing high impact on the system's ability to function properly.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Samsung rlottie library to a version that includes the fix merged in May 2026, specifically after commit 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.
Since the fix was merged in the main branch of the rlottie repository (PR #588), ensure your system uses this updated code to prevent excessive memory allocation issues.