CVE-2017-17554

5.5 mediumEPSS 0.8%

A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2017-12-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aubio:aubio

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-45h5-cqqw-9rjw	PyPI	aubio	<0.4.7	0.4.7
PYSEC-2017-76	PyPI	aubio	<0.4.7	0.4.7

References

https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md
https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md

Check your stack JSON