CVE-2026-19518

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-19518
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Samsung/rlottie/pull/596 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:samsung:rlottie:-:*:*:*:*:*:*:*
History

23 Oct 2026, 19:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de validación impropia de cantidad especificada en la entrada en Samsung Open Source rlottie permite la manipulación de datos de entrada.

23 Sep 2026, 15:44

Type Values Removed Values Added
First Time Samsung
Samsung rlottie
References () https://github.com/Samsung/rlottie/pull/596 - () https://github.com/Samsung/rlottie/pull/596 - Patch, Vendor Advisory
CPE cpe:2.3:a:samsung:rlottie:-:*:*:*:*:*:*:*
Information

Published : 2026-08-11 07:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-19518

Mitre link : CVE-2026-19518

CVE.ORG link : CVE-2026-19518

JSON object : View

Products Affected

samsung

  • rlottie
CWE
CWE-1284

Improper Validation of Specified Quantity in Input