CVE-2026-91826

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-15 · updated 2026-09-18
Weakness: CWE-121

Description

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

Affected products

Samsung Opensource rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39

References

https://github.com/Samsung/rlottie/pull/607

Get alerted when CVE-2026-91826 or the next vulnerability affects your stack