CVE-2026-47319
Deferred Deferred - Pending Action
Memory Allocation Flaw in rlottie Library

Publication date: 2026-06-04

Last updated on: 2026-06-04

Assigner: Samsung TV & Appliance

Description
Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-04
Last Modified
2026-06-04
Generated
2026-06-24
AI Q&A
2026-06-04
EPSS Evaluated
2026-06-23
NVD
CVE-2026-47319
EUVD
EUVD-2026-34233
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
samsung rlottie to 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-789 The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a memory allocation issue in the Samsung Open Source rlottie library. It occurs when the software attempts to allocate memory with an excessively large size value, which can lead to excessive allocation.

Impact Analysis

The vulnerability can lead to excessive memory allocation, which may cause a denial of service by exhausting system resources. According to the CVSS score, it requires local access with low complexity and user interaction, and it can impact availability by causing high impact on the system's ability to function properly.

Mitigation Strategies

To mitigate this vulnerability, update the Samsung rlottie library to a version that includes the fix merged in May 2026, specifically after commit 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.

Since the fix was merged in the main branch of the rlottie repository (PR #588), ensure your system uses this updated code to prevent excessive memory allocation issues.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47319. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart