Описание
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rlottie | unfixed | package | ||
| rlottie | no-dsa | trixie | package | |
| rlottie | postponed | bookworm | package |
Примечания
https://github.com/Samsung/rlottie/pull/596
EPSS
Процентиль: 10%
0.00199
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 2 месяцев назад
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVSS3: 6.5
nvd
около 2 месяцев назад
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVSS3: 5.5
github
около 2 месяцев назад
Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.
EPSS
Процентиль: 10%
0.00199
Низкий