CVE-2026-82797
published 2026-08-31CVE-2026-82797: Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before…
PriorityP421medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.15%
3.9th percentile
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung_open_source | rlottie | < 8de0d9e6ca80ffef654965505981727b9fa06a51 | 8de0d9e6ca80ffef654965505981727b9fa06a51 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
ghsa_unreviewed·2026-08-31
CVE-2026-82797 [MEDIUM] CWE-674 Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Red Hat
rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
vendor_redhat·2026-08-31·CVSS 5.5
CVE-2026-82797 [MEDIUM] CWE-1265 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
A flaw was found in rlottie. This uncontrolled recursion vulnerability allows a local attacker to cause a denial of service (DoS) by providing specially crafted serialized data with nested payloads. Successful exploitation requires user interaction to process the malicious data.
Statement: The rlottie library is shipped in Fedora and EPEL community distributions. The uncontrolled recursion vulnerability can be triggered by processing specially crafted serialized data with nested payloads, leading to a denial of servic
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [epel-all]
bugzilla·2026-08-31·CVSS 5.5
CVE-2026-82797 [MEDIUM] CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [epel-all]
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Bugzilla
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [fedora-all]
bugzilla·2026-08-31·CVSS 5.5
CVE-2026-82797 [MEDIUM] CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [fedora-all]
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
Bugzilla
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
bugzilla·2026-08-31·CVSS 5.5
CVE-2026-82797 [MEDIUM] CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
CVE-2026-82797 rlottie: rlottie: Denial of Service via uncontrolled recursion with serialized data
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads.
This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.
2026-08-31
Published