Read the docs
TI-2026-76182 Aliases CVE-2026-112054GHSA-5cjc-2hj8-3x6x

Divide by zero in libschroedinger low-delay transform parsing

Priority MEDIUM 63CWE-369Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-369.

Summary

Schroedinger libschroedinger through 1.0.11 contains a divide by zero flaw (CWE-369) in low-delay transform parsing. A zero slice_bytes_denom or slice count in a Dirac stream triggers the division. An attacker who supplies a crafted low-delay picture can crash applications that decode it, causing denial of service.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data to trigger a SIGFPE and cause denial of service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Schroedingerschroedingerup to 1.0.11—No fix listedCNA
  • schroedinger VendorSchroedinger Affected up to 1.0.11 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for libschroedinger.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-18 Threatist record created from CVE-2026-112054
  2. 2026-10-18 Alias added: GHSA-5cjc-2hj8-3x6x
  3. 2026-10-19 Priority changed: MEDIUM → LOW
  4. 2026-10-22 CISA SSVC decision points changed
  5. 2026-10-22 Priority changed: LOW → MEDIUM
  6. 2026-10-22 Affected versions changed · Red Hat
  7. 2026-10-22 CVSS score added · Red Hat

References

Advisory 1

Other 1

  • TI-2026-76181 Out-of-bounds read in Schroedinger libschroedinger CVSS 4.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences