CVE-2026-95179 | Airbnb lottie-android up to 6.7.1 Precomposition Reference Graph BaseLayer.forModel/CompositionLayer recursion

October 15, 2026 Yanac

A vulnerability was found in Airbnb lottie-android up to 6.7.1. It has been declared as problematic. Impacted is the function BaseLayer.forModel/CompositionLayer of the component Precomposition Reference Graph. The manipulation results in uncontrolled recursion.

This vulnerability was named CVE-2026-95179. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More