CVE-2026-18772

Summary

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.

Affected Software

VendorProductVersion RangeStatus
Samsung Open Sourcerlottief487eff2f8086b84ae1c7faa0418abec909e874bunaffected

Weaknesses

  • CWE-20: CWE-20 Improper input validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References