Debian/rlottie: medium 5.5

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-108978#Debian:14/rlottie
https://security-tracker.debian.org/tracker/CVE-2026-108978

published 2026-10-11T22:16:50.787Z · modified 2026-10-23T17:47:44.545040063Z · JSON