high8.8
CVE-2018-14521
Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function
Impact
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in `aubio_source_avcodec_readframe` in `io/source_avcodec.c`, as demonstrated by aubiomfcc.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | aubio | < 0.4.7 | 0.4.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aubio | Aubio | Version 0.4.6 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/aubio/aubio/issues/187
- https://github.com/advisories/GHSA-rcv6-7hmv-fj7h
- https://nvd.nist.gov/vuln/detail/CVE-2018-14521
- https://github.com/aubio/aubio/commit/a81b12a3b4174953b3bc7ef4c37103f4d5636740
- https://github.com/pypa/advisory-database/tree/main/vulns/aubio/PYSEC-2018-61.yaml