CVE-2026-15551— Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Samsung Open Source | rlottie | bf689b72b8482c5ea674235854bd11b6d1b42588 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15551
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Source: CVE Program / CVE List V5
Vulnerability Description
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Samsung Open Source rlottie 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Samsung Open Source rlottie是Samsung Open Source开源的轻量级图形渲染库。 Samsung Open Source rlottie存在数字错误漏洞，该漏洞源于整数溢出或环绕错误，可能导致缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Samsung Open Source | rlottie | - | - |
II. Public POCs for CVE-2026-15551
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15551
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-15551 (1)
IV. Related Vulnerabilities
Same weakness: CWE-190
- CVE-2026-71479
New API: Integer overflow in quota billing yields negative c - CVE-2026-73193
DBI versions before 1.652 for Perl allow a heap out-of-bound - CVE-2026-18671
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-17216
IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM - CVE-2026-73645
OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: onc
V. Comments for CVE-2026-15551
No comments yet