CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...

CVE-2026-112053

A flaw was found in schroedinger. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the decoding application. By tricking a user into opening a specially crafted Dirac video stream with invalid parameter values, an attacker can trigger an out-of-bounds read,...

SUSE CVE-2026-112054

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

CVE-2026-112054

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

CVE-2026-112054

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

EUVD-2026-103516

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

CVE-2026-112054: Divide By Zero

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

PT-2026-116637

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice bytes denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro decoder parse transform...

Mzanzi Open Source Solutions schroedinger numerical error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions have a numerical error vulnerability. This vulnerability arises when slicebytesdenom or the slice count is zero in the Dirac stream. Attackers can exploit this vulnerability by triggering SIGFPE with...

CVE-2026-61667

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py checkDataset, where...

CVE-2026-61668

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...

CVE-2026-45579

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py exportgetRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-61668 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-61668 Source advisory: MEND:CVE-2026-61668...

EUVD-2026-78899

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...

ctadirac (>=3.0.13, <=3.2.3a0), ctao-dpps-clients (>=0.7.0rc2, <=0.9.0) +1 more potentially affected by CVE-2026-61668 via dirac (>=9.1.4, <=9.1.9)

dirac PYPI version =9.1.4, =3.0.13, =0.7.0rc2, =0.7.0rc3, =0.9.0 Source cves: CVE-2026-61668 Source advisory: MEND:CVE-2026-61668...

CVE-2026-61668 DIRAC: Pilot code downloaded over unverified HTTPS connection

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...

CVE-2026-61668 DIRAC: Pilot code downloaded over unverified HTTPS connection

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...

comdirac (>=0.22.0, <=1.3.3), ctadirac (>=2.0.0a0, <=3.0.8.dev1) +5 more potentially affected by CVE-2026-61668 via dirac (>=7.2.30, <=8.0.78)

dirac PYPI version =7.2.30, =0.22.0, =2.0.0a0, =0.0.0.dev0, =0.0.0.dev0, =33.0.0a1, =10.2.5, =10.4.23 - lhcbwebdirac 5.3.0a2 Source cves: CVE-2026-61668 Source advisory: MEND:CVE-2026-61668...

CVE-2026-61668

DIRAC is a software framework for distributed computing (interware). The vulnerability is in WorkloadManagementSystem/Utilities/PilotWrapper.py , which uses ssl._create_unverified_context to download the second-stage pilot.tar archive without TLS certificate verification. The reference checksum i...

ctadirac (>=2.2.78, <=3.0.0a5), lhcbdirac (>=11.1.0a4, <=11.1.0a6) potentially affected by CVE-2026-61667 via dirac (>=8.1.0a23, <=9.0.0a59)

dirac PYPI version =8.1.0a23, =2.2.78, =11.1.0a4, =11.1.0a6 Source cves: CVE-2026-61667 Source advisory: MEND:CVE-2026-61667...