CVE-2026-18772

Medium

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.

samsung.tv_appliance·CWE-20·Published 2026-08-04

CVSS

5.5

EPSS

—

KEV

Exploits

cve.orgen

113 chars

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.

NVDen

113 chars

Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
3.1	Secondary	ENISA EUVD	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H