Samsung Open Source rLottie Use-After-Free Vulnerability Allowing Remote Code Inclusion
Vulnerability
A use-after-free vulnerability has been identified in Samsung Open Source rLottie version 0.2, allowing for remote code inclusion. This vulnerability arises from inadequate validation when processing Lottie files, which could be exploited by maliciously crafted files to execute arbitrary code.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.
Remediation
Users can update to the latest version of rLottie, where this vulnerability has been addressed, to mitigate this issue.
Added: Jun 30, 2025, 2:30 AM
Updated: Jun 30, 2025, 2:30 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.