CVE-2026-91826 - Vulnerability Details - OpenCVE

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Samsung Open Source	Rlottie

No data.

No data.

References

Link	Providers
https://github.com/Samsung/rlottie/pull/607

History

Thu, 17 Sep 2026 21:00:00 +0000

Type	Values Removed	Values Added
Title	rLottie Library	Stack-Based Buffer Overflow in Samsung rLottie Rendering Engine

Wed, 16 Sep 2026 07:15:00 +0000

Type	Values Removed	Values Added
Title		rLottie Library

Tue, 15 Sep 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 15 Sep 2026 10:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Samsung Open Source Samsung Open Source rlottie
Vendors & Products		Samsung Open Source Samsung Open Source rlottie

Tue, 15 Sep 2026 09:00:00 +0000

Type	Values Removed	Values Added
Description		Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.
Weaknesses		CWE-121
References		https://github.com/Samsung/rlottie/pull/607
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L'}`

MITRE

Status: PUBLISHED

Assigner: samsung.tv_appliance

Published: 2026-09-15T08:49:48.401Z

Updated: 2026-09-15T13:32:31.821Z

Reserved: 2026-09-15T08:06:41.928Z

Link: CVE-2026-91826

Vulnrichment

Updated: 2026-09-15T13:32:25.877Z

NVD

Status : Deferred

Published: 2026-09-15T09:16:45.743

Modified: 2026-09-18T19:29:56.010

Link: CVE-2026-91826

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-91826", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "state": "PUBLISHED", "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-09-15T08:06:41.928Z", "datePublished": "2026-09-15T08:49:48.401Z", "dateUpdated": "2026-09-15T13:32:31.821Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-15T08:51:58.509Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Samsung Opensource", "product": "rLottie", "versions": [{"status": "affected", "version": "480a2ad0c5d2e45458c545b8213279e9e8b71e39"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.\n\n\nThis issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.<br><p>This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.</p>"}]}], "references": [{"url": "https://github.com/Samsung/rlottie/pull/607"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L"}}], "credits": [{"lang": "en", "value": "Anonymous working with TrendAI Zero Day Initiative", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-15T13:32:20.742778Z", "id": "CVE-2026-91826", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-15T13:32:31.821Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-91826", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-15T13:32:20.742778Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-15T13:32:25.877Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Anonymous working with TrendAI Zero Day Initiative"}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Samsung Opensource", "product": "rLottie", "versions": [{"status": "affected", "version": "480a2ad0c5d2e45458c545b8213279e9e8b71e39"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/Samsung/rlottie/pull/607"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.\n\n\nThis issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.", "supportingMedia": [{"type": "text/html", "value": "Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.<br><p>This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow"}]}], "providerMetadata": {"orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", "dateUpdated": "2026-09-15T08:51:58.509Z"}}}, "cveMetadata": {"cveId": "CVE-2026-91826", "state": "PUBLISHED", "dateUpdated": "2026-09-15T13:32:31.821Z", "dateReserved": "2026-09-15T08:06:41.928Z", "assignerOrgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "datePublished": "2026-09-15T08:49:48.401Z", "assignerShortName": "samsung.tv_appliance"}, "dataVersion": "5.2"}