CVE-2026-71832
Received Received - Intake

Divide By Zero in Aria2 1.37.0 and Below

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: MITRE

Description
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to cause a Denial of Service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-71832
EUVD
EUVD-2026-65117

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
aria2 aria2 to 1.37.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Aria2 versions 1.37.0 and below contain a Divide By Zero vulnerability in src/bittorrent_helper.cc. A remote attacker can exploit this by providing a malicious torrent file with a pieceLength field set to zero. This causes a division-by-zero error, leading to a runtime crash with a Floating point exception and UBSAN error.

Detection Guidance

To detect this vulnerability, monitor for crashes with 'Floating point exception' errors when processing torrent files. Use tools like UBSAN to catch undefined behavior during runtime. Inspect aria2 logs for division-by-zero errors in bittorrent_helper.cc.

Impact Analysis

This vulnerability allows a remote attacker to crash the Aria2 application by sending a specially crafted torrent file. This results in a denial of service, disrupting any ongoing downloads or services relying on Aria2.

Mitigation Strategies

Upgrade aria2 to a version that includes the fix for this issue. If upgrading is not possible, implement input validation to ensure the pieceLength field in torrent files is never zero before processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71832. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart