Schroedinger
Monthly
Divide-by-zero in libschroedinger (Schroedinger) through 1.0.11 allows local attackers to crash applications that decode a crafted Dirac stream, resulting in denial of service. The flaw is reached when a low-delay picture supplies a zero slice_bytes_denom or slice count, causing SIGFPE in schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data. Exploitation requires the victim to open or process a malicious media file (user interaction), and no public exploit code has been identified at time of analysis; impact is limited to availability.
Decoding a crafted low-delay Dirac stream with an out-of-range wavelet filter index (7 or greater) or transform depth (5 or 6) in libschroedinger through 1.0.11 triggers an out-of-bounds read past a static quantiser table, crashing the application. The flaw is availability-only (no code execution, data disclosure, or integrity impact) and requires local access plus user interaction to process the malicious stream; no public exploit was identified at time of analysis, and the issue is assessed as moderate severity.
Divide-by-zero in libschroedinger (Schroedinger) through 1.0.11 allows local attackers to crash applications that decode a crafted Dirac stream, resulting in denial of service. The flaw is reached when a low-delay picture supplies a zero slice_bytes_denom or slice count, causing SIGFPE in schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data. Exploitation requires the victim to open or process a malicious media file (user interaction), and no public exploit code has been identified at time of analysis; impact is limited to availability.
Decoding a crafted low-delay Dirac stream with an out-of-range wavelet filter index (7 or greater) or transform depth (5 or 6) in libschroedinger through 1.0.11 triggers an out-of-bounds read past a static quantiser table, crashing the application. The flaw is availability-only (no code execution, data disclosure, or integrity impact) and requires local access plus user interaction to process the malicious stream; no public exploit was identified at time of analysis, and the issue is assessed as moderate severity.