What is GHSA-27vc-rxrh-6fxx?

GHSA-27vc-rxrh-6fxx is a security advisory published by GitHub Security Advisories with Medium severity. Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to...

Which CVE IDs does GHSA-27vc-rxrh-6fxx cover?

GHSA-27vc-rxrh-6fxx covers the following CVE IDs: CVE-2026-91826. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-27vc-rxrh-6fxx?

GHSA-27vc-rxrh-6fxx has a CVSS v3 base score of 4.4, published by GitHub Security Advisories.

GHSA-27vc-rxrh-6fxxMediumCVSS 4.4

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-91826 →

📋 Description

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations.

This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-91826
https://github.com/Samsung/rlottie/pull/607
https://github.com/advisories/GHSA-27vc-rxrh-6fxx