CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...

CVE-2026-112053

A flaw was found in schroedinger. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the decoding application. By tricking a user into opening a specially crafted Dirac video stream with invalid parameter values, an attacker can trigger an out-of-bounds read,...

CVE-2026-112054: Divide By Zero

Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...

Mzanzi Open Source Solutions Schroedinger buffer error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions contain a buffer error vulnerability. This vulnerability arises from the lack of validation for wavelet filter indices or transformation depth values, which may lead to out-of-bounds reading of static quantization tables...

Mzanzi Open Source Solutions schroedinger numerical error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions have a numerical error vulnerability. This vulnerability arises when slicebytesdenom or the slice count is zero in the Dirac stream. Attackers can exploit this vulnerability by triggering SIGFPE with...

SUSE CVE-2014-9629

Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value...

openSUSE Security Update : vlc (openSUSE-2016-755)

This update for vlc to version 2.1.6 fixes the following issues : These CVE were fixed : - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed : - Fix heap overflow in decomp stream...

Debian DSA-3150-1 : vlc - security update

Fabian Yamaguchi discovered multiple vulnerabilities in VLC, a multimedia player and streamer : - CVE-2014-9626 The MP4 demuxer, when parsing string boxes, did not properly check the length of the box, leading to a possible integer underflow when using this length value in a call to memcpy. This...

DSA-3150-1 vlc - security update

Bulletin has no description...

PT-2015-3380

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 2.1.6 VLC media player versions 2.2.x prior to 2.2.1 Description The issue is related to an integer overflow in the Encode function, specifically in the Schroedinger codec, which can lead to a buffer overflow...