Packages / Debian 13 (Trixie) / Source / libs / rlottie

Source Package: rlottie (0.1+dfsg-4.2+deb13u2)

library for rendering vector based animations and art

The following binary packages are built from this source package:

librlottie0-1
library for rendering vector based animations and art
librlottie-dev
library for rendering vector based animations and art (development headers)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-108978] Published: Oct 11, 2026, 9:31:24 PM UTC Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.	Medium(5.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-91826] Published: Sep 15, 2026, 8:49:48 AM UTC Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affect	Medium(4.4)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-82797] Published: Aug 31, 2026, 11:28:08 AM UTC Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.	Medium(5.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-19588] Published: Aug 12, 2026, 2:23:07 AM UTC Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.	Medium(6.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-19518] Published: Aug 11, 2026, 7:17:29 AM UTC Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.	Medium(6.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-19517] Published: Aug 11, 2026, 7:17:29 AM UTC Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.	Medium(6.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13
[CVE-2026-15551] Published: Jul 13, 2026, 12:11:59 AM UTC Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .	Medium(5.5)	Affected Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Affected nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Affected nvd · rlottie · debian · 13

Fixed and unaffected versions (13)

CVE	Severity	Version impact
[CVE-2026-19587] Published: Aug 12, 2026, 2:14:59 AM UTC Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.	Medium(6.5)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13
[CVE-2026-18772] Published: Aug 4, 2026, 10:19:32 AM UTC Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.	Medium(6.5)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4` nvd · rlottie · debian · 13
[CVE-2026-8916] Published: Jun 4, 2026, 9:44:26 AM UTC Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13
[CVE-2026-47318] Published: Jun 4, 2026, 9:43:56 AM UTC Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before ce72b35a7ad0dded03051d3aa0ef75321c3bd035.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13
[CVE-2026-47306] Published: Jun 4, 2026, 9:43:14 AM UTC Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061cc98945.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-3` nvd · rlottie · debian · 13
[CVE-2026-49510] Published: Jun 4, 2026, 9:41:17 AM UTC Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-1` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-1` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-1` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-1` nvd · rlottie · debian · 13
[CVE-2026-10305] Published: Jun 4, 2026, 9:40:26 AM UTC Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13
[CVE-2026-47319] Published: Jun 4, 2026, 9:39:55 AM UTC Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1d2c2ad89b101dd.	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13
[CVE-2026-47320] Published: Jun 4, 2026, 9:38:27 AM UTC Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue affects rlottie: befor	Medium(6.1)	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u2` nvd · rlottie · debian · 13
[CVE-2025-53074] Published: Jun 30, 2025, 3:15:00 AM UTC rlottie vulnerabilities	Medium	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13
[CVE-2025-0634] Published: Jun 30, 2025, 2:15:00 AM UTC rlottie vulnerabilities	Medium	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13
[CVE-2025-53075] Published: Jun 30, 2025, 2:15:00 AM UTC rlottie vulnerabilities	Medium	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-4.2+deb13u1` usn · rlottie · debian · 13
[CVE-2021-31317] Published: May 18, 2021, 8:15:00 PM UTC rlottie: CVE-2021-31317	Medium	Fixed Details (4) `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-2` dsa · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-2` dsa · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · amd64 · trixie Fixed · Fixed: `0.1+dfsg-2` dsa · rlottie · debian · 13 `0.1+dfsg-4.2+deb13u2` · arm64 · trixie Fixed · Fixed: `0.1+dfsg-2` dsa · rlottie · debian · 13

[Next results]

Last synced: Oct 28, 2026, 1:17:55 AM UTC

[CVE catalog]

Sources

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified