NIXPKGS-2026-2467

GitHub issue published 8 hours ago

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized …

Permalink CVE-2026-82797

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 8 hours ago by @LeSuisse Activity log

Created suggestion 19 hours ago
@LeSuisse ignored package libsForQt5.rlottie-qml 9 hours ago
@LeSuisse accepted 9 hours ago
@LeSuisse published on GitHub 8 hours ago

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized …

Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.

References

https://github.com/Samsung/rlottie/pull/603

Affected products

rlottie

<8de0d9e6ca80ffef654965505981727b9fa06a51

Matching in nixpkgs

pkgs.rlottie

Platform independent standalone c++ library for rendering vector based animations and art in realtime

nixos-unstable 0.2-unstable-2025-10-01
- nixpkgs-unstable 0.2-unstable-2025-10-01
- nixos-unstable-small 0.2-unstable-2026-08-11
nixos-26.05 0.2-unstable-2025-10-01
- nixos-26.05-small 0.2-unstable-2026-08-11
- nixpkgs-26.05-darwin 0.2-unstable-2025-10-01

Ignored packages (1)

pkgs.libsForQt5.rlottie-qml

Library for using rlottie via QML

nixos-unstable 0-unstable-2021-05-03
- nixpkgs-unstable 0-unstable-2021-05-03
- nixos-unstable-small 0-unstable-2021-05-03
nixos-26.05 0-unstable-2021-05-03
- nixos-26.05-small 0-unstable-2021-05-03
- nixpkgs-26.05-darwin 0-unstable-2021-05-03

Package maintainers

@CRTified Carl Richard Theodor Schneider <carl.schneider+nixos@rub.de>