Samsung Open Source rlottie IEV: Improper Validation Enables Oversized Payloads
CVE-2026-18772 Published on August 4, 2026
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
Vulnerability Analysis
CVE-2026-18772 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
What is a Stack Exhaustion Vulnerability?
The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.
CVE-2026-18772 has been classified to as a Stack Exhaustion vulnerability or weakness.
Products Associated with CVE-2026-18772
Want to know whenever a new CVE is published for Samsung Rlottie? stack.watch will email you.
