CVE-2026-19517

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-19517
Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Samsung/rlottie/pull/596 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:rlottie:-:*:*:*:*:*:*:*
History

23 Oct 2026, 19:10

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de Validación Incorrecta de Cantidad Especificada en la Entrada y Asignación de Recursos Sin Límites o Limitación en Samsung Open Source rlottie permite Asignación Excesiva.

23 Sep 2026, 15:44

Type Values Removed Values Added
CPE cpe:2.3:a:samsung:rlottie:-:*:*:*:*:*:*:*
References () https://github.com/Samsung/rlottie/pull/596 - () https://github.com/Samsung/rlottie/pull/596 - Patch, Vendor Advisory
First Time Samsung
Samsung rlottie
Information

Published : 2026-08-11 07:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-19517

Mitre link : CVE-2026-19517

CVE.ORG link : CVE-2026-19517

JSON object : View

Products Affected

samsung

  • rlottie
CWE
CWE-770

Allocation of Resources Without Limits or Throttling

CWE-1284

Improper Validation of Specified Quantity in Input