{"id":"CVE-2026-108978","details":"Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.\n\nThis issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.","modified":"2026-10-13T02:46:50.519739153Z","published":"2026-10-11T21:31:24.126Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108978.json","cna_assigner":"samsung.tv_appliance","cwe_ids":["CWE-122"]},"references":[{"type":"WEB","url":"https://github.com/Samsung/rlottie/pull/609/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108978.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108978"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/samsung/rlottie","events":[{"introduced":"e57b094f03c39a751a1fded6f7d6c13f1ed95ec9"},{"last_affected":"e57b094f03c39a751a1fded6f7d6c13f1ed95ec9"}]}],"versions":["e57b094f03c39a751a1fded6f7d6c13f1ed95ec9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-108978.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}