Samsung Rlottie — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Rlottie, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-0634 — CVSS 9.8 (critical): Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
• CVE-2025-53075 — CVSS 9.8 (critical): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.
• CVE-2025-53076 — CVSS 9.8 (critical): Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
• CVE-2025-53074 — CVSS 9.1 (critical): Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.