# Bug report flags FFmpeg VPK divide-by-zero crash

_Thursday, August 27, 2026 at 1:53 PM EDT · Security · Latest · Tier 2 — Notable_

![Bug report flags FFmpeg VPK divide-by-zero crash — Primary](https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/24290/summary-card)

A report filed in FFmpeg's issue tracker says a crafted 21-byte VPK input can trigger an integer divide-by-zero crash in the VPK demuxer.

The report attributes the fault to divisions by a channel-count value that can be zero in a custom-AVIO fuzzing path. It characterizes the issue as a denial-of-service primitive affecting FFmpeg-linked applications that open a malicious VPK file or stream, and proposes rejecting zero-channel streams. The report does not establish that a fix has been accepted or released.

## Sources

- [Hacker News](https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/24290)

---
Canonical: https://techandbusiness.org/newswire/C2h5fY740wFfWhnyeRdkKN
Retrieved: 2026-08-28T03:37:09.460Z
Publisher: Tech & Business (techandbusiness.org)