CVE-2026-108978 is a heap-based buffer overflow vulnerability in Samsung Opensource rlottie that allows for Buffer Overflow via Environment Variables. This issue affects rlottie version e57b094f03c39a751a1fded6f7d6c13f1ed95ec9. The vulnerability has a medium severity and requires verification of affected versions and consideration of updates to prevent potential buffer overflow via environment variables. [truncated]
CVE-2026-92259 is an integer overflow or wraparound vulnerability in Samsung Opensource Escargot that allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. The vulnerability requires specific access and has a medium impact. Defenders should assess exposure, verify affected versions, and monitor official sour [truncated]
A stack-based buffer overflow vulnerability exists in Samsung Opensource rLottie, which allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie version 480a2ad0c5d2e45458c545b8213279e9e8b71e39. The vulnerability has a medium CVSS score of 4.4, indicating a moderate level of severity. Defenders should prioritize verifying the a [truncated]
CVE-2026-86315 is a medium-severity vulnerability in Samsung Open Source Escargot on Linux x86-64, caused by an out-of-bounds write due to numeric truncation. An attacker who can supply JavaScript for execution can corrupt native memory and crash the host process via a crafted class definition. This issue affects Escargot version 5dc93606abd42b859045add05d704a038e197359.
