CVE-2026-47320CWE-674CWE-824

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data…

Medium · published June 4, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads.

This issue affects rlottie: before eae37633fda13ac05b25c6c95aacea4bc33c80a3.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weaknesses
CWE-674 · Uncontrolled Recursion; CWE-824 · Access of Uninitialized Pointer
Published
2026-06-04T09:38Z
EPSS history
Timeline
  • 04 JUN 09:38Z
    Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data…
    cvelistv5