CVE-2026-112054 Details

A divide-by-zero vulnerability has been identified in the Schroedinger libschroedinger library, affecting all versions through 1.0.11. The vulnerability arises in the Dirac video codec decoder, specifically within the low-delay transform parsing. When a Dirac stream is processed, the decoder reads unbounded values for slice parameters without proper validation. If a zero value is encountered for the slice bytes denominator or slice count, it leads to a division by zero, causing a crash via a SIGFPE signal. This vulnerability can be exploited by supplying a crafted low-delay picture in a Dirac stream, triggering the denial-of-service condition.

To address this vulnerability, update the libschroedinger library to a version that includes proper validation of stream-controlled indices and slice parameters. If the library is no longer maintained, consider removing it from the application's dependencies.