CVE-2026-112054
Received Received - Intake

Divide by Zero in Schroedinger libschroedinger

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulnCheck

Description
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data to trigger a SIGFPE and cause denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-112054
EUVD
EUVD-2026-103516

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Schroedinger schroedinger 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-369 The product divides a value by zero.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a divide by zero flaw in Schroedinger libschroedinger through version 1.0.11. Attackers can crash applications by providing a zero value for slice_bytes_denom or slice count in a Dirac stream. This triggers a SIGFPE signal, causing a denial of service.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of Schroedinger libschroedinger (up to 1.0.11). Use commands like 'dpkg -l | grep schroedinger' on Debian-based systems or 'rpm -qa | grep schroedinger' on RPM-based systems to list installed versions. Inspect application logs for SIGFPE errors during Dirac stream processing.

Impact Analysis

This vulnerability can cause applications using the Schroedinger library to crash, leading to denial of service. If exploited via a crafted video file, it may allow arbitrary code execution or further system compromise.

Compliance Impact

This vulnerability primarily causes application crashes via denial of service, which may impact availability of systems processing media files. While not directly violating GDPR or HIPAA, repeated crashes could disrupt services handling personal or health data, potentially leading to compliance issues if availability requirements are not met.

Mitigation Strategies

Immediately update Schroedinger libschroedinger to a patched version beyond 1.0.11. If updating is not possible, restrict processing of untrusted Dirac streams or disable affected applications. Monitor for crashes or SIGFPE signals in media processing workflows.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112054. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart