Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters and schrodecoderparselowdelaytransformdata to trigger a SIGFPE and cause denial of service.

Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filter index of 7 or more or transform depth of 5 or 6 to crash decoding applications.