Vulnerabilities > Aubio > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-12-12 CVE-2017-17555 NULL Pointer Dereference vulnerability in multiple products
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
network
low complexity
aubio ffmpeg CWE-476
6.5
2017-12-12 CVE-2017-17554 NULL Pointer Dereference vulnerability in Aubio 0.4.6
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
local
low complexity
aubio CWE-476
5.5
2017-11-29 CVE-2017-17054 Divide By Zero vulnerability in Aubio 0.4.6
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
local
low complexity
aubio CWE-369
5.5