CVE-2026-112013Medium· 5.5▾ Sunlitlibtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the bundled tta console tool.
libtta <= 2.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112012Medium· 5.3libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count
CVE-2026-112011Medium· 5.3libtta through 2.3 Integer Overflow via tta_decoder_init_get_info Seek Table
CVE-2022-49294Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check if modulo is 0 before dividing. [How & Why] If a value of 0 is read, then this will cause a divide-by-0 panic.
CVE-2026-112054Medium· 5.5Schroedinger libschroedinger through 1.0.11 Divide by Zero in Low-Delay Transform Parsing
CVE-2026-10679Low· 3.3Divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)
CVE-2018-11212Medium· 6.5An issue was discovered in libjpeg 9a and 9d