CVE-2026-19518

Full vulnerability record from the local CVENow database.

Description

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

Severity

MEDIUM

CVSS score

6.5 (v3.1)

Vulnerability status

Analyzed

Source identifier

[email protected]

Published

2026-08-11 07:17:29.883000

Last modified

2026-10-23 19:10:00.167000

View original CVE JSON

{
  "id": "CVE-2026-19518",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-11T07:17:29.883",
  "lastModified": "2026-10-23T19:10:00.167",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de validación impropia de cantidad especificada en la entrada en Samsung Open Source rlottie permite la manipulación de datos de entrada."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Samsung Open Source",
          "product": "rlottie",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "f487eff2f8086b84ae1c7faa0418abec909e874b",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-11T16:55:21.611977Z",
          "id": "CVE-2026-19518",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1284"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:samsung:rlottie:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "839F9D6A-5E2B-4FDF-9F6F-CB9D3ED281F0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Samsung/rlottie/pull/596",
      "source": "[email protected]",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}