CVE-2026-112054
Description
A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulting in a Denial of Service (DoS).
Statement
A divide-by-zero flaw was found in libschroedinger's low-delay Dirac transform parsing. A crafted Dirac stream with a zero slice_bytes_denom or zero slice count reaches an unguarded integer division (schrodecoder.c:2932 and schrolowdelay.c sinks), causing a SIGFPE application crash (denial of service). User interaction is required to process an attacker-supplied stream; the upstream project has been abandoned since 2012 and no fixed release exists.
Mitigation
Avoid decoding untrusted Dirac streams with applications linked against libschroedinger. The Fedora/EPEL schroedinger package ships the unpatched upstream 1.0.11; upstream is abandoned, so remediation requires a downstream patch (reject zero slice_bytes_denom / n_horiz_slices / n_vert_slices, as proposed in the researcher writeup) or package retirement.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
