Descriptionrlottie through 0.2, fixed in commit 2cab35d, contains a resource exhaustion vulnerability that allows an attacker to exhaust process memory by supplying a crafted Lottie animation file with an unbounded Repeater shape modifier copy count. The parser in lottieparser.cpp stores the repeater copy count verbatim from the file without validation, causing renderer::Repeater::Repeater in lottieitem.cpp to allocate one full Group content sub-tree per iteration, enabling a single small animation file to trigger hundreds of millions of allocation attempts that grow the process to several gigabytes until terminated by the operating system OOM killer.