SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-18772

MEDIUM · CVSS 6.5 EPSS 0.20% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-09-03

CyberRota Analysis

AI-Generated

The vulnerability in Samsung Open Source rlottie arises from improper input validation, which permits oversized serialized data payloads. This flaw could lead to potential denial-of-service conditions or application crashes. Organizations utilizing rlottie in their applications should prioritize addressing this vulnerability to ensure system stability and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18772
Severity
MEDIUM
CVSS
6.5
EPSS
0.20%

Original NVD Description

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.