CVE-2026-112013

libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the...

EUVD-2026-103466

libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the...

CVE-2026-112013 libtta through 2.3 Divide by Zero via tta_decoder_init_get_info

libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the...

CVE-2026-112013

The libtta library (through version 2.3 ) contains a divide-by-zero vulnerability within the tta_decoder_init_get_info() function. An attacker can cause an application to crash by providing a .tta file with an unvalidated zero sample rate and a recomputed header CRC32 . This trigger causes a SIGF...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55653

GPAC MP4Box v2.4 contains a floating point exception within the gf_parse_lfrac function located in utils/error.c. The vulnerability is triggered when the software processes a crafted MP4 file containing a fraction string with a zero-denominator , causing the application to divide by zero. This re...

EUVD-2025-211112

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

PT-2026-116126

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A floating point exception occurs in the gf parse lfrac function utils/error.c when processing a specially crafted MP4 file. The issue is triggered by a zero-denominator fraction string, which leads to a...

DEBIAN-CVE-2026-109246

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadowencoderinflightframes can underflow. An authenticated client can acknowled...

CVE-2026-109246

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadowencoderinflightframes can underflow. An authenticated client can acknowled...

CVE-2026-109246

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadowencoderinflightframes can underflow. An authenticated client can acknowled...

EUVD-2026-97690

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadowencoderinflightframes can underflow. An authenticated client can acknowled...

PT-2026-110663

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0 Description The freerdp-shadow-cli shadow server fails to perform a range check on the frame id within a client's Frame Acknowledge PDU. This allows the in-flight frame count in the shadow encoder inflight fram...

CVE-2026-107159

MiniUPnPd versions through 2.3.11 built with the --strict flag are vulnerable to a divide-by-zero vulnerability in the ProcessSSDPData() function. An unauthenticated attacker on the local network can crash the daemon by sending a single multicast M-SEARCH datagram to port 1900 featuring an MX: 0 ...

Astra Linux – Vulnerability in hdf5

A SIGFPE signal is raised in the function H5Dcreatechunkfilemaphyper of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempt to parse a crafted HDF file. This occurs due to incorrect protection against division by zero. This could allow a remote denial-of-service attack...

DEBIAN-CVE-2026-101887

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

CVE-2026-101887 BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

PT-2026-103660

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dp lc3plus dec thread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...