tocsin

PyPI/aubio CVE-2017-17554: unknown, EPSS 0.82%

A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.

Action: Upgrade aubio to 0.4.7 or later.

pip install aubio==0.4.7

Affected

introducedfixedlast affected
00.4.7-

Fixed versions

0.4.7

Sources

CVE-2017-17554 · published · modified · JSON