Skip to main content

Ubuntu CVE-2025-53074

| EUVDEUVD-2025-19537 CRITICAL
Out-of-bounds Read (CWE-125)
2025-06-30 PSIRT@samsung.com
Samsung Information Disclosure Buffer Overflow Ubuntu Debian Rlottie
Critical
Disputed · 9.1 NVD
Share

Severity by source

Sources disagree (Medium–Critical)
NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Ubuntu
MEDIUM
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 16, 2026 - 01:25 euvd
EUVD-2025-19537
Analysis Generated
Mar 16, 2026 - 01:25 vuln.today
CVE Published
Jun 30, 2025 - 03:15 nvd
CRITICAL 9.1

DescriptionCVE.org

Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.

Analysis

Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.

Technical ContextAI

An out-of-bounds memory access occurs when code reads from or writes to memory locations outside the intended buffer boundaries. This vulnerability is classified as Out-of-bounds Read (CWE-125).

RemediationAI

Implement proper bounds checking on all array and buffer accesses. Use memory-safe languages or static analysis tools to detect OOB issues.

More in Rlottie

View all
CVE-2025-53076 CRITICAL
9.8 Jun 30

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLotti
CVE-2025-53075 CRITICAL
9.8 Jun 30

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie:
CVE-2025-0634 CRITICAL
9.8 Jun 30

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.
CVE-2026-15551 MEDIUM
5.5 Jul 13

Integer overflow in Samsung's open-source rlottie animation rendering library leads to buffer overflow, with high availa

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2016-1646 HIGH POC
8.8
CVE-2025-5777 HIGH POC
7.5
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

Ubuntu

Priority: Medium
rlottie
Release Status Version
focal released 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2
oracular ignored end of life, was needs-triage
plucky ignored end of life, was needs-triage
jammy released 0.1+dfsg-2ubuntu0.2
noble released 0.1+dfsg-4ubuntu1.1
questing released 0.1+dfsg-4.2ubuntu0.1
upstream released -
USN-8058-1

Debian

Bug #1109341
rlottie
Release Status Fixed Version Urgency
bullseye fixed 0.1+dfsg-2+deb11u1 -
bullseye (security) fixed 0.1+dfsg-2+deb11u1 -
bookworm fixed 0.1+dfsg-4+deb12u1 -
trixie fixed 0.1+dfsg-4.2+deb13u1 -
forky, sid fixed 0.1+dfsg-4.3 -
(unstable) fixed 0.1+dfsg-4.3 -
DLA-4474-1

Share

CVE-2025-53074 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy