{"action":"Upgrade aubio to 0.4.7 or later.","affected":[{"fixed":"0.4.7","introduced":"0"}],"component":"aubio","cve_ids":["CVE-2017-17054"],"ecosystem":"PyPI","epss":0.00842,"exploited":false,"fixed_versions":["0.4.7"],"ghsa_id":"GHSA-vcwx-8mqh-2557","id":"tcs_01M5KG7GA7WPX988EKAZWE5SET","modified_at":"2026-06-10T17:00:34.972847251Z","published_at":"2017-11-29T07:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-75","https://github.com/aubio/aubio/issues/148","https://github.com/advisories/GHSA-vcwx-8mqh-2557"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-75","url":"https://osv.dev/vulnerability/PYSEC-2017-75"}],"summary":"In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file."}