AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-18772

MEDIUM · CVSS 5.5 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-08-04

CyberRota Analysis

AI-Generated

The vulnerability in Samsung Open Source rlottie arises from improper input validation, which permits oversized serialized data payloads. This flaw could lead to potential denial-of-service conditions or application crashes. Organizations utilizing rlottie in their applications should prioritize addressing this vulnerability to ensure system stability and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18772
Severity
MEDIUM
CVSS
5.5
EPSS
0.13%

Original NVD Description

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.