Unrated severityNVD Advisory· Published Oct 15, 2026· Updated Oct 15, 2026

CVE-2026-95179

Description

An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Airbnb/lottie-androidllm-create
Range: <=6.7.1

Patches

Vulnerability mechanics

References

github.com/FFG0d/security-advisories/blob/main/advisories/CVE-2026-95179.mdmitre
github.com/Samsung/rlottie/pull/603mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000