Live › vulnerability › CVE-2026-112054
Go to dashboardlibschroedinger, the Dirac video codec library, divides by zero when a Dirac stream sets slice_bytes_denom or the slice count to zero. An attacker who supplies a crafted low-delay picture can crash any application that decodes it, through a SIGFPE.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that decode Dirac video streams with libschroedinger through 1.0.11 are exposed when they accept streams from untrusted sources. Systems that never decode Dirac or do not link libschroedinger can skip it. The sources do not say which default configurations or products bundle the library.
No product ranges from the sources yet.
ldconfig -p | grep schro or pkg-config --modversion schroedinger-1.01.0.11; unknown whether all releases up to that version are the only affected onesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data to trigger a SIGFPE and cause denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-112054")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.