CVE-2026-91826 PUBLISHED

Assigner: samsung.tv_appliance
Reserved: 15.09.2026 Published: 15.09.2026 Updated: 15.09.2026

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.

This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS Score: 4.4

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	Required	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	Samsung Opensource
Product	rLottie
Versions	Default: unaffected Version 480a2ad0c5d2e45458c545b8213279e9e8b71e39 is affected

Credits

Anonymous working with TrendAI Zero Day Initiative finder

References

https://github.com/Samsung/rlottie/pull/607

Problem Types

CWE-121 Stack-based buffer overflow CWE

Impacts

CAPEC-100 Overflow Buffers