CVE-2026-112053

MediumCVSS 5.5

Published: 18/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. A crafted low-delay Dirac stream with a wavelet filter index of 7 or more or transform depth of 5 or 6 crashes decoding applications.

Risk Assessment

Applications decoding Dirac video using libschroedinger can be crashed by a crafted stream, resulting in denial of service. Memory disclosure from the process is also possible.

Recommendation

Update libschroedinger to a version newer than 1.0.11 once available. Until then, avoid processing untrusted Dirac streams.

Other vulnerabilities in libschroedinger

CVE-2026-112054Medium
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. A crafted low-delay picture parsed by schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data triggers a SIGFPE and causes denial of service.

Original NVD description (English source)

Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filter index of 7 or more or transform depth of 5 or 6 to crash decoding applications.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS