Samsung Rlottie — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Rlottie, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2025-53075 — CVSS 9.8 (critical): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.
• CVE-2025-53076 — CVSS 9.8 (critical): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
• CVE-2025-0634 — CVSS 9.8 (critical): Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
• CVE-2025-53074 — CVSS 9.1 (critical): Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.
• CVE-2026-19587 — CVSS 6.5 (medium): Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
• CVE-2026-19588 — CVSS 6.5 (medium): Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
• CVE-2026-18772 — CVSS 6.5 (medium): Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
• CVE-2026-19517 — CVSS 6.5 (medium): Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open…
• CVE-2026-19518 — CVSS 6.5 (medium): Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
• CVE-2026-15551 — CVSS 5.5 (medium): Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .