PyPI/aubio CVE-2017-17054: unknown, EPSS 0.84%

In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.

Action: Upgrade aubio to 0.4.7 or later.

pip install aubio==0.4.7

Affected

Fixed versions

Sources

• osv: PYSEC-2017-75
• https://github.com/aubio/aubio/issues/148
• https://github.com/advisories/GHSA-vcwx-8mqh-2557

CVE-2017-17054 · published 2017-11-29T07:29:00Z · modified 2026-06-10T17:00:34.972847251Z · JSON