CVE-2026-82797 PUBLISHED

Assigner: samsung.tv_appliance
Reserved: 31.08.2026 Published: 31.08.2026 Updated: 31.08.2026

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.

This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS Score: 5.5

Product Status

Vendor Samsung Open Source
Product rlottie
Versions Default: unaffected
  • affected from 0 to 8de0d9e6ca80ffef654965505981727b9fa06a51 (excl.)

Credits

  • Fatullayev Asadbek finder

References

Problem Types

  • CWE-674 Uncontrolled Recursion CWE

Impacts

  • CAPEC-230 Serialized Data with Nested Payloads