This vulnerability exists in the low-delay transform parsing logic of Schroedinger libschroedinger through version 1.0.11. A crafted Dirac stream containing a zero slice_bytes_denom or zero slice count causes the decoder to perform a divide‑by‑zero operation, raising SIGFPE and crashing the host process. The resulting denial of service can result in application unavailability or interruption of media playback. The weakness is a divide‑by‑zero error (CWE‑369).

The affected software is Schroedinger's libschroedinger library, versions 1.0.11 and earlier. Any system that uses this library to decode Dirac media streams, including applications that embed the library directly or through media frameworks, is potentially impacted.

The vulnerability carries a CVSS score of 6.8, indicating moderate severity, and there is no reported exploit probability data (EPSS) or listing in the CISA KEV catalog. The exploit requires that an attacker provide a maliciously crafted media stream that the target application parses with schro_decoder_parse_transform_parameters and schro_decoder_parse_lowdelay_transform_data. Because the fault occurs in the decoding path, it can be triggered through remote network channels if the application accepts user-supplied media, but it can also be exploited locally by supplying crafted files to a vulnerable program. As the description indicates, the attack results in a process crash rather than arbitrary code execution.