CVE-2026-112054: Schroedinger libschroedinger through 1.0.11 Divide by Zero in Low-Delay Transform Parsing
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters and schrodecoderparselowdelaytransformdata to trigger a SIGFPE and cause denial of service.
Affected Software
Event History
Frequently Asked Questions
What conditions are required to trigger the crash?
An attacker must cause the application to parse a crafted Dirac low-delay picture with a zero slice_bytes_denom or slice count. The vulnerable parsing paths are schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data.
What is the practical impact of successful exploitation?
Successful exploitation triggers a SIGFPE due to division by zero, crashing the affected application and causing denial of service. The provided information does not indicate confidentiality or integrity impact.
Which versions are known to be affected?
libschroedinger through version 1.0.11 is identified as affected. No fixed version is provided in the available data.