# Bug report flags FFmpeg VPK divide-by-zero crash

_Published Thursday, August 27, 2026 at 9:07 PM EDT · Security · Latest · Tier 2 — Notable_

![Summary card of an issue titled "Integer Divide-by-Zero in `vpk_read_packet` (VPK Demuxer)" in repository FFmpeg/FFmpeg — Primary](https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/24290/summary-card)

A report filed in FFmpeg's issue tracker says a crafted 21-byte VPK input can trigger an integer divide-by-zero crash in the VPK demuxer.

The report attributes the fault to divisions by a channel-count value that can be zero in a custom-AVIO fuzzing path. It characterizes the issue as a denial-of-service primitive affecting FFmpeg-linked applications that open a malicious VPK file or stream, and proposes rejecting zero-channel streams. The report does not establish that a fix has been accepted or released.

## Sources

- [code.ffmpeg.org](https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/24290)

---
Canonical: https://techandbusiness.org/newswire/C2h5fY740wFfWhnyeRdkKN
Published: 2026-08-28T01:07:18.057Z
Story chronology: 2026-08-27T17:53:40.000Z
Retrieved: 2026-10-12T10:39:38.195Z
Publisher: Tech & Business (techandbusiness.org)