{"action":"Upgrade aubio to 0.4.7 or later.","affected":[{"fixed":"0.4.7","introduced":"0"}],"component":"aubio","cve_ids":["CVE-2017-17554"],"ecosystem":"PyPI","epss":0.00819,"exploited":false,"fixed_versions":["0.4.7"],"ghsa_id":"GHSA-45h5-cqqw-9rjw","id":"tcs_01M5KG7GF47VJ6D7549F709ZNN","modified_at":"2026-06-10T17:00:35.698018941Z","published_at":"2017-12-12T01:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-76","https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference(DoS)%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md","https://github.com/advisories/GHSA-45h5-cqqw-9rjw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-76","url":"https://osv.dev/vulnerability/PYSEC-2017-76"}],"summary":"A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file."}