Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-53076 EUVD-2025-19536GHSA-4g28-pqg3-vcxc

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.

Published Jun 30, 2025 · Updated Jun 30, 2025 · Assigned by samsung.tv_appliance

Description

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.

Affected products

VendorProductAffectedFixed
Samsung Open Source rLottie V0.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 rlottie No fix yet —
Ubuntu 25.10 rlottie No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS rlottie No fix yet —
Ubuntu Pro 24.04 LTS rlottie No fix yet —
Ubuntu Pro 22.04 LTS rlottie No fix yet —
Ubuntu Pro 20.04 LTS rlottie No fix yet —

References