Description
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data to trigger a SIGFPE and cause denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schroedinger schroedinger
Default version status: unaffected
0 to ≤ 1.0.11affected
References
- https://hackmd.io/@haindpwn/schroedinger-lowdelay-quant-matrix-oob ↗
- https://github.com/Distrotech/schroedinger/blob/schroedinger-1.0.11/schroedinger/schrodecoder.c#L2932 ↗
- https://www.vulncheck.com/advisories/schroedinger-libschroedinger-through-1.0.11-divide-by-zero-in-low-delay-transform-parsing ↗
- https://hackmd.io/@haindpwn/cve-2026-112053-112054-schroedinger-lowdelay-quant-matrix-oob ↗