Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-19588 EUVD-2026-57064GHSA-r32h-pjq3-jjwf

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by samsung.tv_appliance

Description

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Affected products

VendorProductAffectedFixed
Samsung Open Source rlottie — 8117b9ee595763f35c0da2c07181203959f0c510

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 rlottie No fix yet —
Debian 13 rlottie No fix yet —
Debian 12 rlottie No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 rlottie No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS rlottie No fix yet —
Ubuntu Pro 24.04 LTS rlottie No fix yet —
Ubuntu Pro 22.04 LTS rlottie No fix yet —
Ubuntu Pro 20.04 LTS rlottie No fix yet —

References