The vulnerability is an out-of-bounds read that occurs when the library processes a low‑delay Dirac bitstream with a wavelet filter index of seven or more or a transform depth of five or six. This is a CWE-125 out-of-bounds read weakness. The unvalidated parameters allow the decoder to read memory past a static quantiser table, which can cause a crash of the application using the library. This loss of availability is the primary impact identified in the description and is reflected in the CVSS score of 6.8.

The issue affects the Schroedinger libschroedinger library, specifically all releases through version 1.0.11. No higher‑version coverage is listed, so any installation of this library in that range is vulnerable. The vendor is identified as Schroedinger:schroedinger.

With a CVSS of 6.8 the vulnerability carries a moderate risk level. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, implying limited evidence of widespread exploitation. Attacks require delivery of a crafted stream with specific parameter values, which indicates that the likelihood of exploitation is low but not negligible for targeted or automated attackers capable of constructing such streams.