#rlottie
LightNews LightNews
methdealers.org
Hey telegram has been severely compromised and there is no fix as of now, maybe don't open telegram for a bit securityarsenal.com/blog/cve-202...
CVE-2026-111105: Unpatched Telegram rlottie Zero-Day Enables Unauthenticated Code Execution — Detection and Mitigation Guide
An unpatched numeric truncation flaw in Telegram's rlottie library (CVE-2026-111105) lets attackers achieve remote code execution via a malicious animated sticker or file. No fix exists — here's how t...
securityarsenal.com
October 30, 2026 at 2:02 PM
gramnews.bsky.social
Zero-Click Chain via Telegram Animated Stickers Demonstrated at OffensiveCon Tokyo

Fuzzing rlottie with a language model, bypassing server-side sticker validation, and executing code in Telegram for iOS — without a single tap from the victim.

#Telegram
Zero-Click Chain via Telegram Animated Stickers Demonstrated at OffensiveCon Tokyo
Fuzzing rlottie with a language model, bypassing server-side sticker validation, and executing code in Telegram for iOS — without a single tap from the victim.
gramnews.org
October 30, 2026 at 9:19 PM
thedailytechfeed.com
A zero-click flaw in Telegram stickers now lets attackers execute code on iOS—rlottie exploit exposed. #Telegram #Security #Vulnerability #rlottie #iOS #ZeroClick https://thedailytechfeed.com/telegram-stickers-exploited-0-click-ios-vulnerability-exposed/
October 28, 2026 at 5:29 PM
vulnsea.com
🌊 ABYSSAL · critical with a public exploit
CVE-2026-111105: Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
CVSS 7 · 0day
https://beta.vulnsea.com/cve/CVE-2026-111105

#CVE #infosec #cybersecurity #threatintel
CVE-2026-111105 — Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerabili…
beta.vulnsea.com
October 15, 2026 at 6:56 PM
hugovalters.bsky.social
CVE-2026-111105 - RCE vulnerability in Telegram's rlottie library. Exploitation requires opening a malicious file. CVSS 7.0. Avoid opening untrusted files. #CVE #Telegram #infosec

https://www.valtersit.com/cve/CVE-2026-111105/
Vulnerability intelligence card
October 15, 2026 at 11:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102227
📊 7.0/10
🏢 Telegram

📝 Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102227

#cybersecurity #infosec #cve #euvd
October 15, 2026 at 8:01 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] rlottie: 0.2-unstable-2026-09-11 -> 0.2-unstable-2026-10-01

https://github.com/NixOS/nixpkgs/pull/573341

#security
October 12, 2026 at 8:40 PM
cve.skyfleet.blue
CVE-2026-108978 - Samsung rlottie Heap-based Buffer Overflow
CVE ID : CVE-2026-108978

Published : Oct. 11, 2026, 10:16 p.m. | 1 hour, 6 minutes ago

Description : Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment...
CVE-2026-108978 - Samsung rlottie Heap-based Buffer Overflow
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.
cvefeed.io
October 11, 2026 at 11:43 PM
euvd-bot.bsky.social
🚨 EUVD-2026-97125
📊 5.5/10
🏢 Samsung Opensource

📝 Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.

This issue affects rl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97125

#cybersecurity #infosec #cve #euvd
October 11, 2026 at 11:00 PM
deafnews-auto.bsky.social
CVE-2026-91826: RCE in Samsung rlottie Library Creates Supply-Chain Risk
CVE-2026-91826: RCE in Samsung rlottie Library Creates Supply-Chain Risk
A stack-based buffer overflow in Samsung's open-source rlottie library allows remote code execution via crafted vector animations. The component is widely embedded in third-party apps for rendering stickers and interactive content, extending exposure far beyond Samsung's own products.
deafnews.it
September 17, 2026 at 4:06 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] rlottie: 0.2-unstable-2026-08-11 -> 0.2-unstable-2026-09-01

https://github.com/NixOS/nixpkgs/pull/558914

#security
September 1, 2026 at 9:33 PM
nixpkgssecuritychanges.gerbet.me
rlottie: 0.2-unstable-2026-08-11 -> 0.2-unstable-2026-09-01

https://github.com/NixOS/nixpkgs/pull/558851

https://tracker.security.nixos.org/issues/NIXPKGS-2026-2467

#security
September 1, 2026 at 9:07 PM
nixpkgs-prs-bot.bsky.social
#558876 libretro.bsnes-mercury: 0-unstable-2026-07-26 -> 0-unstable-2026-08-23
#558866 dua: 2.42.1 -> 2.44.0
#558863 yazi{-unwrapped}: 26.8.15 -> 26.9.1
#558851 rlottie: 0.2-unstable-2026-08-11 -> 0.2-unstable-2026-09-01
#558847 pnpm_10_29_2,pnpm_10_34_0: add CVEs to meta.knownVulnerabilities
September 2, 2026 at 12:05 AM
malwareobserver.bsky.social
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82797](https://github.com/Samsung/rlottie/pull/603)
Uncontrolled Recursion vulnerabilit...
https://github.com/Samsung/rlottie/pull/603 #PatchManagement #Vulnerability #CVE
August 31, 2026 at 1:19 PM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] rlottie: 0.2-unstable-2026-07-03 -> 0.2-unstable-2026-08-11

https://github.com/NixOS/nixpkgs/pull/553259

#security
August 16, 2026 at 10:04 AM
nixpkgssecuritychanges.gerbet.me
rlottie: 0.2-unstable-2026-07-03 -> 0.2-unstable-2026-08-11

https://github.com/NixOS/nixpkgs/pull/553170

https://tracker.security.nixos.org/issues/NIXPKGS-2026-2349

#security
August 16, 2026 at 9:06 AM
cve.skyfleet.blue
CVE-2026-19588 - Samsung rlottie Integer Overflow to Buffer Overflow
CVE ID : CVE-2026-19588

Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago

Description : Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Severity:...
CVE-2026-19588 - Samsung rlottie Integer Overflow to Buffer Overflow
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
cvefeed.io
August 12, 2026 at 4:55 AM
euvd-bot.bsky.social
🚨 EUVD-2026-55950
📊 6.5/10

📝 Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Exce...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55950

#cybersecurity #infosec #cve #euvd
August 11, 2026 at 7:00 AM
euvd-bot.bsky.social
🚨 EUVD-2026-55952
📊 6.5/10

📝 Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55952

#cybersecurity #infosec #cve #euvd
August 11, 2026 at 7:00 AM
qiancx.bsky.social
深度解析CVE-2026-15551:Samsung开源rlottie整数溢出漏洞的危害与防护策略

https://qian.cx/posts/FF4234BC-A7D2-41C0-B85C-2C5525E75FD8
July 13, 2026 at 1:30 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-53076 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-53076

Samsung Open Source - rLottie

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-53076
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
June 30, 2025 at 2:35 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-53074 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-53074

Samsung Open Source - rLottie

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-53074
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
June 30, 2025 at 2:35 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-0634 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-0634

Samsung Open Source - rLottie

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-0634
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
June 30, 2025 at 1:49 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-53075 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-53075

Samsung Open Source - rLottie

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-53075
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
June 30, 2025 at 1:49 AM