GitHub Advisoryadvisory · PyPI

GHSA-vcwx-8mqh-2557 Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

HIGH Published 2022-05-17 Modified 2024-11-18 Official page ↗
Aliases
CVE-2017-17054
Ecosystem
PyPI
Packages
aubio
Severity
High
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-369
Reviewed
2023-08-04

Affected packages

• PyPI aubio: < 0.4.7 → fixed in 0.4.7

Description

In aubio 0.4.6, a divide-by-zero error exists in the function `new_aubio_source_wavread()` in source_wavread.c, which may lead to DoS when playing a crafted audio file.

Related

Alias · CVE (1)

  • CVE-2017-17054 In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when… vulnerability

Weakness · CWE (1)

References