Samsung Opensource

Products

ProductCVEsExploitedLatest
rLottie3–Oct 11, 2026
Escargot2–Sep 15, 2026
Walrus2–Sep 7, 2026

Exploited and recent CVEs

  • CVE-2026-108978 Medium 5.5 Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9. 0.1%
  • CVE-2026-92259 Medium 5.5 Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of servi 0.1%
  • CVE-2026-91826 Medium 4.4 Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affect 0.1%
  • CVE-2026-86315 Medium 6.2 An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host 0.2%
  • CVE-2026-86314 Medium 6.2 Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of ser 0.2%
  • CVE-2026-86313 High 7.8 Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7. 0.2%
  • CVE-2026-49509 Medium 4.4 Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630. 0.1%