Packages / Debian 12 (Bookworm) / Source / libs / rlottie

Source Package: rlottie (0.1+dfsg-4+deb12u2)

library for rendering vector based animations and art

The following binary packages are built from this source package:

  • librlottie0-1

    library for rendering vector based animations and art

  • librlottie-dev

    library for rendering vector based animations and art (development headers)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-108978]

Published:

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.

Medium(5.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-91826]

Published:

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affect

Medium(4.4)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-82797]

Published:

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.

Medium(5.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-19588]

Published:

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Medium(6.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-19518]

Published:

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

Medium(6.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-19517]

Published:

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

Medium(6.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-15551]

Published:

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .

Medium(5.5)Affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Affected

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

Fixed and unaffected versions (13)
CVESeverityVersion impact
[CVE-2026-49509]

Published:

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630.

Medium(4.4)Not affected
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Not affected

    nvd · rlottie · debian · bookworm

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Not affected

    nvd · rlottie · debian · bookworm

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Not affected

    nvd · rlottie · debian · bookworm

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Not affected

    nvd · rlottie · debian · bookworm

[CVE-2026-19587]

Published:

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

Medium(6.5)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-18772]

Published:

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.

Medium(6.5)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-8916]

Published:

Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-47318]

Published:

Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before ce72b35a7ad0dded03051d3aa0ef75321c3bd035.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-47306]

Published:

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-3

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-49510]

Published:

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-1

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-1

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-1

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-1

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-10305]

Published:

Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-47319]

Published:

Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2026-47320]

Published:

Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: befor

Medium(6.1)Fixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u2

    nvd · rlottie · debian · bookworm; nvd · rlottie · debian · 12

[CVE-2025-53074]

Published:

rlottie vulnerabilities

MediumFixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

[CVE-2025-0634]

Published:

rlottie vulnerabilities

MediumFixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

[CVE-2025-53075]

Published:

rlottie vulnerabilities

MediumFixed
Details (4)
  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · amd64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

  • 0.1+dfsg-4+deb12u2 · arm64 · bookworm

    Fixed · Fixed: 0.1+dfsg-4+deb12u1

    usn · rlottie · debian · bookworm; usn · rlottie · debian · 12

[Next results]

Last synced:

[CVE catalog]

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified