This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-91826 →

DEBIAN-CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when render...

Original description

The description as published by the source.

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 rlottie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 rlottie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 rlottie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org